Do Son
TL;DR Attackers are exploiting two unauthenticated stored XSS flaws in Ninja Forms and WPC Product Bundles for...
Vulnerability Report
TL;DR Cisco has published four advisories that cover 18 CVEs across License On-Prem, APIC and Meraki devices....
TL;DR Cisco has fixed a critical NX-API flaw, CVE-2026-76471, that could let an unauthenticated attacker run code...
TL;DR Cisco has released fixes for four critical Cisco Nexus vulnerabilities, each rated 9.8 on CVSS. The...
TL;DR The Argo CD project has fixed four critical security flaws, each rated 9.9 on CVSS. Three...
TL;DR The Apache Software Foundation has patched two Apache Jackrabbit vulnerabilities in its WebDAV components. The worst,...
TL;DR Gitea has shipped 27 security fixes across versions 28.0.0 and 28.1.0. This Gitea security update closes...
TL;DR Attackers have begun CVE-2026-21589 exploitation against self-managed Atlassian servers. Researchers at watchTowr published a full technical...
TL;DR Elastic has published 14 security advisories covering Elasticsearch, Kibana and Elastic Defend. Three of these Elastic...
TL;DR ASUS has released router firmware that fixes four security flaws, and two of them rate Critical...
TL;DR ASUSTOR has patched CVE-2026-105324, a critical ASUSTOR ADM vulnerability with a CVSS 4.0 score of 9.2....
TL;DR HPE Networking has patched nine HPE AOS-Switch vulnerabilities, and six of them rate Critical. The worst...
TL;DR Maintainers of Handlebars.js have patched two critical flaws that can lead to remote code execution. Each...
TL;DR Google has promoted Chrome 155 to the Stable channel with 247 security fixes. The Chrome 155...
TL;DR Arista has patched six flaws in the CloudVision CUE (CV-CUE) backend for its WiFi software. The...
TL;DR HPE Networking has fixed 28 ClearPass Policy Manager vulnerabilities in a single advisory, and ten of...
TL;DR Veeam has fixed three flaws in Backup & Replication version 12, led by CVE-2025-64393. This critical...
TL;DR WordPress released version 7.1.3 on October 6, 2026. The WordPress 7.1.3 security update addresses seven reported...
TL;DR SonicWall has fixed four flaws in its SMA1000 remote access appliances, led by CVE-2026-102255, a SonicWall...
TL;DR Progress has fixed CVE-2026-91140, a critical Progress DataDirect vulnerability in its Autonomous REST Connector AI Model...
TL;DR CERT@VDE has disclosed CVE-2026-94293, a critical AAS edge client vulnerability in Murrelektronik’s aas-edge-client. The flaw scores...
TL;DR Fortbridge researcher Adrian Tiron has published a working proof-of-concept for a WordPress libheif RCE chain. It...