Vulnerability Report

PoC Exploit and Technical Details Released for LibreOffice Calc Code Execution Flaw CVE-2026-63277

• Vulnerability Report

PoC Exploit and Technical Details Released for LibreOffice Calc Code Execution Flaw CVE-2026-63277

Do Son October 6, 2026 0

TL;DR The Document Foundation has fixed six flaws in LibreOffice, led by CVE-2026-63277, a LibreOffice Calc vulnerability...

Read More Read more about PoC Exploit and Technical Details Released for LibreOffice Calc Code Execution Flaw CVE-2026-63277

Critical Atlassian Flaw CVE-2026-21589 Exposes Files in Jira, Confluence, Bitbucket and Five More Products

• Vulnerability Report

Critical Atlassian Flaw CVE-2026-21589 Exposes Files in Jira, Confluence, Bitbucket and Five More Products

Do Son October 6, 2026 0

TL;DR Atlassian has patched CVE-2026-21589, a critical Atlassian Data Center vulnerability with a CVSS score of 9.3....

Read More Read more about Critical Atlassian Flaw CVE-2026-21589 Exposes Files in Jira, Confluence, Bitbucket and Five More Products

Twenty CRM Flaw CVE-2026-105763 Exposes Plaintext Email Passwords to Any Workspace Member

• Vulnerability Report

Twenty CRM Flaw CVE-2026-105763 Exposes Plaintext Email Passwords to Any Workspace Member

Do Son October 6, 2026 0

TL;DR A Twenty CRM vulnerability, CVE-2026-105763, let any workspace member read other members’ IMAP, SMTP and CalDAV...

Read More Read more about Twenty CRM Flaw CVE-2026-105763 Exposes Plaintext Email Passwords to Any Workspace Member

IBM Patches 25 Langflow Vulnerabilities, Including Two Critical Remote Code Execution Flaws

• Vulnerability Report

IBM Patches 25 Langflow Vulnerabilities, Including Two Critical Remote Code Execution Flaws

Do Son October 6, 2026 0

TL;DR IBM has published a security bulletin covering 25 Langflow vulnerabilities in Langflow OSS versions 1.0.0 through...

Read More Read more about IBM Patches 25 Langflow Vulnerabilities, Including Two Critical Remote Code Execution Flaws

Apache Thrift 0.25.0 Fixes 61 Vulnerabilities, Including Two Critical Heap Overflows

• Vulnerability Report

Apache Thrift 0.25.0 Fixes 61 Vulnerabilities, Including Two Critical Heap Overflows

Do Son October 6, 2026 0

TL;DR The Apache Thrift project has fixed 61 Apache Thrift vulnerabilities in version 0.25.0, published on October...

Read More Read more about Apache Thrift 0.25.0 Fixes 61 Vulnerabilities, Including Two Critical Heap Overflows

AMD RCCL Vulnerability Could Enable Remote Code Execution on Instinct GPU Clusters

• Vulnerability Report

AMD RCCL Vulnerability Could Enable Remote Code Execution on Instinct GPU Clusters

Do Son October 6, 2026 0

TL;DR AMD has disclosed CVE-2026-43598, an AMD RCCL vulnerability rated 7.7 on CVSS 4.0. The flaw sits...

Read More Read more about AMD RCCL Vulnerability Could Enable Remote Code Execution on Instinct GPU Clusters

Apache Struts 7.4.0 Fixes Four Vulnerabilities, Including OGNL Injection and REST Plugin DoS

• Vulnerability Report

Apache Struts 7.4.0 Fixes Four Vulnerabilities, Including OGNL Injection and REST Plugin DoS

Do Son October 5, 2026 0

TL;DR The Apache Struts team has fixed four Apache Struts vulnerabilities in Struts 7.4.0 and 6.12.0. The...

Read More Read more about Apache Struts 7.4.0 Fixes Four Vulnerabilities, Including OGNL Injection and REST Plugin DoS

Perforce Fixes Six P4 Search Vulnerabilities, Including a CVSS 10 Default Token Flaw

• Vulnerability Report

Perforce Fixes Six P4 Search Vulnerabilities, Including a CVSS 10 Default Token Flaw

Do Son October 5, 2026 0

TL;DR Perforce has patched six P4 Search vulnerabilities in version 2026.4.2. The worst, CVE-2026-100103, scores a perfect...

Read More Read more about Perforce Fixes Six P4 Search Vulnerabilities, Including a CVSS 10 Default Token Flaw

MediaTek October 2026 Security Bulletin Fixes 31 Flaws, Including Two Critical Modem Bugs

• Vulnerability Report

MediaTek October 2026 Security Bulletin Fixes 31 Flaws, Including Two Critical Modem Bugs

Do Son October 5, 2026 0

TL;DR The October 2026 MediaTek security bulletin patches 31 vulnerabilities across its smartphone, tablet and IoT chipsets....

Read More Read more about MediaTek October 2026 Security Bulletin Fixes 31 Flaws, Including Two Critical Modem Bugs

Researcher Publishes Technical Details and PoC Exploit for macOS HFS+ Kernel Flaw CVE-2026-43682

• Vulnerability Report

Researcher Publishes Technical Details and PoC Exploit for macOS HFS+ Kernel Flaw CVE-2026-43682

Do Son October 5, 2026 0

TL;DR Security researcher Peter Malone has published a full technical analysis and proof-of-concept code for CVE-2026-43682, a...

Read More Read more about Researcher Publishes Technical Details and PoC Exploit for macOS HFS+ Kernel Flaw CVE-2026-43682

Citrix NetScaler CVE-2026-88779 Exploited in the Wild to Knock SAML Gateways Offline

• Vulnerability Report

Citrix NetScaler CVE-2026-88779 Exploited in the Wild to Knock SAML Gateways Offline

Do Son October 4, 2026 0

TL;DR Citrix has assigned Citrix NetScaler CVE-2026-88779 to the SAML issue behind recent appliance reboots. The company...

Read More Read more about Citrix NetScaler CVE-2026-88779 Exploited in the Wild to Knock SAML Gateways Offline

Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server

• Vulnerability Report

Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server

Do Son October 3, 2026 0

TL;DR The Apache Software Foundation disclosed eight CVEs on October 2, 2026, across three projects. The most...

Read More Read more about Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server

Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

• Vulnerability Report

Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

Do Son October 3, 2026 0

Microsoft has shipped a V2 release of its September 2026 Exchange Server security updates. The only change...

Read More Read more about Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws

• Vulnerability Report

AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws

Do Son October 2, 2026 0

TL;DR AWS published two security bulletins on October 2, 2026, covering four CVEs. Three hit Loom for...

Read More Read more about AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws

Digi DAL OS Vulnerability Lets Unauthenticated Attackers Run Root Commands

• Vulnerability Report

Digi DAL OS Vulnerability Lets Unauthenticated Attackers Run Root Commands

Do Son October 2, 2026 0

TL;DR Digi International disclosed CVE-2026-75937, a critical Digi DAL OS vulnerability scored 9.4 on CVSS 4.0. One...

Read More Read more about Digi DAL OS Vulnerability Lets Unauthenticated Attackers Run Root Commands

Chrome Security Update Fixes Critical WebGL Flaw and 10 Other Bugs

• Vulnerability Report

Chrome Security Update Fixes Critical WebGL Flaw and 10 Other Bugs

Do Son October 2, 2026 0

TL;DR Google pushed Chrome 154.0.8037.97/.98 to the Stable channel with 11 security fixes. The headline bug, CVE-2026-103628,...

Read More Read more about Chrome Security Update Fixes Critical WebGL Flaw and 10 Other Bugs

GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands

• Vulnerability Report

GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands

Do Son October 2, 2026 0

TL;DR GitLab released AI Gateway versions 19.2.4, 19.3.2, and 19.4.1 to fix CVE-2026-90970. The GitLab AI Gateway...

Read More Read more about GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands

Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue

• Vulnerability Report

Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue

Do Son October 2, 2026 0

TL;DR Citrix admins report NetScaler appliances rebooting repeatedly even after updating to build 14.1-73.37. Citrix now says...

Read More Read more about Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue

Seven TP-Link Vulnerabilities Hit Tapo Cameras, Archer and Deco Routers

• Vulnerability Report

Seven TP-Link Vulnerabilities Hit Tapo Cameras, Archer and Deco Routers

Do Son October 2, 2026 0

TL;DR TP-Link published four security advisories on October 1, 2026, covering seven TP-Link vulnerabilities. The worst, CVE-2026-102369,...

Read More Read more about Seven TP-Link Vulnerabilities Hit Tapo Cameras, Archer and Deco Routers

Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk

• Vulnerability Report

Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk

Do Son October 2, 2026 0

TL;DR Moxa disclosed two Moxa MGate vulnerabilities on October 2, 2026. The worse flaw, CVE-2026-86325, scores 9.4...

Read More Read more about Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk

Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed

• Vulnerability Report

Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed

Do Son October 2, 2026 0

TL;DR Full technical details and a proof-of-concept are now public for CVE-2026-85714, a CVSS 9.1 Stirling PDF...

Read More Read more about Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed

Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution

• Vulnerability Report

Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution

Do Son October 2, 2026 0

TL;DR On October 1, Dell fixed five flaws in Dell System Update (DSU), led by a 9.6...

Read More Read more about Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution