Vulnerability Report Archives • Daily CyberSecurity

Critical Laravel TokenGuard Flaw (CVSS 9.2) Lets Attackers Log In as Any User Laravel authentication bypass flaw in TokenGuard enables account takeover

Laravel authentication bypass flaw in TokenGuard enables account takeover

Critical Laravel TokenGuard Flaw (CVSS 9.2) Lets Attackers Log In as Any User

Do Son October 19, 2026

TL;DR Laravel published two security advisories on October 19, 2026. The more serious one is a critical...

Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection Roundcube security update fixes IMAP command injection and header injection flaws

Roundcube security update fixes IMAP command injection and header injection flaws

Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection

Do Son October 19, 2026

TL;DR Roundcube released versions 1.6.20 and 1.7.5 on October 19, 2026, fixing 20 security issues. This Roundcube...

PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host Linux kernel VM escape flaw PwnEscape CVE-2026-99999 allows guest-to-host escape

Linux kernel VM escape flaw PwnEscape CVE-2026-99999 allows guest-to-host escape

PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host

Do Son October 19, 2026

TL;DR PWNAI Research has disclosed PwnEscape (CVE-2026-99999), a critical Linux kernel VM escape flaw in the IPv4...

CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras dcm4chee vulnerabilities and EseeCloud hard-coded credentials flaw in CISA advisories

dcm4chee vulnerabilities and EseeCloud hard-coded credentials flaw in CISA advisories

CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras

Do Son October 19, 2026

TL;DR CISA published two advisories on October 15, 2026, covering nine flaws. Six dcm4chee vulnerabilities could expose...

Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape Linux kernel vulnerabilities with public privilege escalation PoC exploits disclosed in Infinity Core research

Linux kernel vulnerabilities with public privilege escalation PoC exploits disclosed in Infinity Core research

Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape

Do Son October 19, 2026

TL;DR Researcher Hyunwoo Kim has published full details and proof-of-concept exploits for six Linux kernel vulnerabilities he...

Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection, Plus Airflow and Answer Bugs Apache Kylin vulnerabilities and Apache Airflow SSH flaws fixed in new security releases

Apache Kylin vulnerabilities and Apache Airflow SSH flaws fixed in new security releases

Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection, Plus Airflow and Answer Bugs

Do Son October 19, 2026

TL;DR On October 16, 2026, Apache disclosed 12 Apache Kylin vulnerabilities, including a critical SQL injection flaw,...

Plex2Shell Exploited in the Wild: PoC Released for Unauthenticated Plex Media Server RCE Chain Plex Media Server vulnerabilities exploited in the wild after Plex2Shell PoC release

Plex Media Server vulnerabilities exploited in the wild after Plex2Shell PoC release

Plex2Shell Exploited in the Wild: PoC Released for Unauthenticated Plex Media Server RCE Chain

Do Son October 19, 2026

TL;DR Attackers began exploiting Plex Media Server vulnerabilities on October 17, 2026, one day after researcher Zach...

Rank Math SEO PRO supply-chain compromise diagram showing CVE-2026-111862 backdoor impact

Rank Math SEO PRO Supply-Chain Compromise Exploited in the Wild via Version 3.0.123

Do Son October 17, 2026

TL;DR Rank Math SEO PRO for WordPress suffered a critical supply-chain compromise (CVE-2026-111862) that is actively exploited...

BeyondTrust Remote Support vulnerability attack chain showing ARMORY CASTLE zero-day exploitation of CVE-2026-102764

Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE

Do Son October 16, 2026

TL;DR BeyondTrust disclosed a critical BeyondTrust Remote Support vulnerability (CVE-2026-102764) on October 15, 2026, that is actively...

Chrome 155 Update Fixes 10 Security Flaws, Including Critical Prerender Bug Chrome security update fixes critical use after free flaw CVE-2026-110922

Chrome security update fixes critical use after free flaw CVE-2026-110922

Chrome 155 Update Fixes 10 Security Flaws, Including Critical Prerender Bug

Do Son October 16, 2026

TL;DR Google released Chrome 155.0.8059.84/.85 on October 15, 2026, with fixes for 10 vulnerabilities. This Chrome security...

Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities Mitsubishi Electric security advisory for ICONICS Suite vulnerabilities including CVE-2026-16438, CVE-2023-4863, and CVE-2026-16436

Mitsubishi Electric security advisory for ICONICS Suite vulnerabilities including CVE-2026-16438, CVE-2023-4863, and CVE-2026-16436

Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities

Do Son October 16, 2026

TL;DR Mitsubishi Electric released a security advisory on October 15, 2026, addressing four critical and high-severity ICONICS...

Progress Software Patches Twelve High-Severity MOVEit Transfer Vulnerabilities Progress security bulletin detailing MOVEit Transfer vulnerabilities including CVE-2026-87093, CVE-2026-89067, and CVE-2026-89068

Progress security bulletin detailing MOVEit Transfer vulnerabilities including CVE-2026-87093, CVE-2026-89067, and CVE-2026-89068

Progress Software Patches Twelve High-Severity MOVEit Transfer Vulnerabilities

Do Son October 16, 2026

TL;DR Progress Software disclosed twelve high-severity MOVEit Transfer vulnerabilities on October 14, 2026. These security flaws enable...

Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability Backuply WordPress plugin SQL injection vulnerability diagram showing CVE-2026-93953 privilege escalation impact

Backuply WordPress plugin SQL injection vulnerability diagram showing CVE-2026-93953 privilege escalation impact

Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability

Do Son October 16, 2026

TL;DR Wordfence disclosed a high-severity SQL injection vulnerability (CVE-2026-93953) in the Backuply WordPress plugin on October 15,...

AWS Patches Critical Amazon Neptune Vulnerability in Apache TinkerPop Gremlin Amazon Neptune vulnerability diagram showing Apache TinkerPop Gremlin flaw CVE-2026-110812 impact

Amazon Neptune vulnerability diagram showing Apache TinkerPop Gremlin flaw CVE-2026-110812 impact

AWS Patches Critical Amazon Neptune Vulnerability in Apache TinkerPop Gremlin

Do Son October 16, 2026

TL;DR Amazon Web Services (AWS) published security bulletin 2026-136-AWS on October 15, 2026, addressing a critical Amazon...

cURL Releases Version 8.23.0 to Fix Critical Flaw

Do Son October 15, 2026

The widely deployed open-source project cURL recently released version 8.23.0. This vital update remedies a use-after-free flaw...

Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update Next.js security update fixes unauthenticated remote code execution flaws

Next.js security update fixes unauthenticated remote code execution flaws

Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update

Do Son October 15, 2026

TL;DR Vercel shipped Next.js 16.4.1 and 15.5.28 on October 14, 2026, in an out-of-band release. The Next.js...

Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws Citrix security update fixes XenServer and UniconOS privilege escalation vulnerabilities

Citrix security update fixes XenServer and UniconOS privilege escalation vulnerabilities

Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws

Do Son October 15, 2026

TL;DR Citrix released two high-severity bulletins covering seven flaws in XenServer and UniconOS. This Citrix security update...

SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access SiteGuard Server Edition vulnerability CVE-2026-106931 exploited in the wild for OS command injection

SiteGuard Server Edition vulnerability CVE-2026-106931 exploited in the wild for OS command injection

SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access

Do Son October 15, 2026

TL;DR JPCERT/CC warned on October 14, 2026, that attackers are exploiting CVE-2026-106931 in SiteGuard Server Edition. The...

Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms Junos OS vulnerabilities overview showing Juniper security bulletin fixes for CVE-2026-102182, CVE-2026-101954, and CVE-2026-33792

Junos OS vulnerabilities overview showing Juniper security bulletin fixes for CVE-2026-102182, CVE-2026-101954, and CVE-2026-33792

Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms

Do Son October 15, 2026

TL;DR Juniper Networks published its October 2026 security bulletins on October 14, 2026, resolving dozens of critical...

Dell Patches Four Critical Wyse Management Suite XSS Vulnerabilities Dell Wyse Management Suite security update DSA-2026-405 fixing CVE-2026-82158, CVE-2026-82159, and CVE-2026-82161

Dell Wyse Management Suite security update DSA-2026-405 fixing CVE-2026-82158, CVE-2026-82159, and CVE-2026-82161

Dell Patches Four Critical Wyse Management Suite XSS Vulnerabilities

Do Son October 15, 2026

TL;DR Dell Technologies released security advisory DSA-2026-405 to address four cross-site scripting (XSS) flaws in Dell Wyse...

NSD stack overwrite vulnerability diagram showing CVE-2026-101341, CVE-2026-101339, and CVE-2026-101338 impact

NLnet Labs Patches Four NSD Stack Overwrite Vulnerabilities

Do Son October 15, 2026

TL;DR NLnet Labs released NSD version 4.15.3 on October 14, 2026, to fix four high-severity flaws. Each...

SonicWall Patches High-Severity SonicWall NSM On-Prem Access Control and Command Injection Flaws SonicWall NSM On-Prem vulnerabilities CVE-2026-96540 and CVE-2026-100232 security advisory

SonicWall NSM On-Prem vulnerabilities CVE-2026-96540 and CVE-2026-100232 security advisory

SonicWall Patches High-Severity SonicWall NSM On-Prem Access Control and Command Injection Flaws

Do Son October 15, 2026

TL;DR SonicWall released security updates to fix two high-severity flaws in SonicWall NSM On-Prem deployments. Tracked as...