Patch Alert Archives • Page 6 of 18 • Daily CyberSecurity

In the Wild: Information Disclosure (CVE-2026-20133) Exploited in Cisco SD-WAN Manager

Cisco SD-WAN Vulnerability CVE-2026-20133 FortiGate Compromise Ivanti EPMM Zero-Day CVE-2026-1281 SmarterMail Vulnerability Storm-2603 WatchGuard Zero-Day, IKEv2 Out-of-Bounds Write Cisco Zero-Day, UAT-9686 Chinese APT FortiWeb RCE Exploitation CVE-2025-58034 VMware Zero-Day, Privilege Escalation Sitecore, remote code execution CVE-2025-53690 Windows CLFS, Privilege Escalation CVE-2024-47575 & CVE-2024-11120 CVE-2025-24983 vulnerability

In the Wild: Information Disclosure (CVE-2026-20133) Exploited in Cisco SD-WAN Manager

Do Son April 23, 2026

The networking giant Cisco has issued an urgent warning to enterprise administrators. In April 2026, the Cisco...

Linux Privilege Escalation: “Pack2TheRoot” Flaw Impacts Major Distributions Pack2TheRoot Vulnerability PackageKit Privilege Escalation

Linux Privilege Escalation: “Pack2TheRoot” Flaw Impacts Major Distributions

Do Son April 23, 2026

A long-standing security flaw has been unearthed in a core component of the modern Linux desktop and...

Total Database Collapse: Inside the ElectricSQL CVSS 10.0 SQL Injection ElectricSQL SQL Injection PostgreSQL Tenant Isolation

Total Database Collapse: Inside the ElectricSQL CVSS 10.0 SQL Injection

Do Son April 22, 2026

ElectricSQL, the popular sync engine used to power modern real-time applications, has disclosed a catastrophic SQL injection...

High-Severity PHPUnit Vulnerability Enables Remote Code Execution PHPUnit RCE Poisoned Pipeline Execution PHPUnit Vulnerability CVE-2026-24765

PHPUnit RCE Poisoned Pipeline Execution PHPUnit Vulnerability CVE-2026-24765

High-Severity PHPUnit Vulnerability Enables Remote Code Execution

Do Son April 22, 2026

The PHP development community is facing a significant security risk following the disclosure of a critical argument...

NVIDIA Fixes High-Severity Flaws in KAI Scheduler and CUDA-Q NVIDIA GPU Security CUDA-Q Vulnerability NVIDIA Apex Vulnerability AI Infrastructure Security NVIDIA Cumulus Linux CVE-2025-33179 NVIDIA Arm divestment NVIDIA DGX Spark, CVE-2025-33187 NVIDIA Isaac-GROOT, Code Injection Megatron-LM Vulnerability, AI Code Injection NVIDIA China NVIDIA GPUs, Hardware Kill Switches NVIDIA Megatron-LM, LLM Vulnerabilities NVIDIA Base Command Manager - CVE-2024-0138

NVIDIA GPU Security CUDA-Q Vulnerability NVIDIA Apex Vulnerability AI Infrastructure Security NVIDIA Cumulus Linux CVE-2025-33179 NVIDIA Arm divestment NVIDIA DGX Spark, CVE-2025-33187 NVIDIA Isaac-GROOT, Code Injection Megatron-LM Vulnerability, AI Code Injection NVIDIA China NVIDIA GPUs, Hardware Kill Switches NVIDIA Megatron-LM, LLM Vulnerabilities NVIDIA Base Command Manager - CVE-2024-0138

NVIDIA Fixes High-Severity Flaws in KAI Scheduler and CUDA-Q

Do Son April 22, 2026

NVIDIA has released a series of software updates to address high-severity vulnerabilities in its KAI Scheduler and...

GitLab Security Update: High-Severity Vulnerabilities Patched in April Release GitLab security updates, GitLab patch release, CVE-2026-6552, CVE-2026-10087, CVE-2026-7250 GitLab Security Update May 2026 GitLab XSS and DoS Vulnerabilities GitLab Security Session Hijacking GitLab Security Update, CI/CD Vulnerability GitLab DoS, Security Update bypassing SAML - CVE-2024-8312 and CVE-2024-6826

GitLab security updates, GitLab patch release, CVE-2026-6552, CVE-2026-10087, CVE-2026-7250 GitLab Security Update May 2026 GitLab XSS and DoS Vulnerabilities GitLab Security Session Hijacking GitLab Security Update, CI/CD Vulnerability GitLab DoS, Security Update bypassing SAML - CVE-2024-8312 and CVE-2024-6826

GitLab Security Update: High-Severity Vulnerabilities Patched in April Release

Do Son April 22, 2026

GitLab has released a vital set of security updates for both Community Edition (CE) and Enterprise Edition...

CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database Firebird Database RCE CVE-2026-40342

CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database

Do Son April 22, 2026

Researchers have disclosed a critical-severity vulnerability in Firebird, the long-standing relational database with roots dating back to...

CrowdStrike Issues Critical Alert: LogScale Vulnerability Allows Unauthenticated File Access LogScale Vulnerability Path Traversal Falcon Sensor File Deletion, CVE-2025-42701 CrowdStrike update crashes - CVE 2025-1146

CrowdStrike Issues Critical Alert: LogScale Vulnerability Allows Unauthenticated File Access

Do Son April 22, 2026

TranslationCrowdStrike has released an urgent security update to address a critical flaw in its LogScale platform that...

Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection CVE-2023-22518 Bamboo RCE CI/CD Supply Chain Security

Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection

Do Son April 22, 2026

Atlassian has issued a high-priority advisory for its Bamboo Data Center users, detailing a critical-severity security flaw...

7 Critical Vulnerabilities Threaten Spring Security 7.0 cve-2024-38810 Spring Security 7.0 Vulnerabilities Authorization Bypass

7 Critical Vulnerabilities Threaten Spring Security 7.0

Do Son April 22, 2026

The Spring Security team has issued a series of security advisories detailing seven distinct vulnerabilities impacting the...

MOVEit WAF Critical Alert: Multi-Level RCE and WAF Bypass Vulnerabilities Disclosed CVE-2024-4358 MOVEit WAF RCE Progress ADC Vulnerabilities

MOVEit WAF Critical Alert: Multi-Level RCE and WAF Bypass Vulnerabilities Disclosed

Do Son April 21, 2026

Progress Software has released a critical security bulletin for April 2026, revealing five high-impact vulnerabilities affecting MOVEit...

OVN Security Alert: Critical Heap Over-Read Flaws Risk Sensitive Data Leaks OVN Heap Over-read Network Memory Leak

OVN Security Alert: Critical Heap Over-Read Flaws Risk Sensitive Data Leaks

Do Son April 21, 2026

The Open Virtual Network (OVN) team has issued a dual-threat security advisory concerning two critical heap over-read...

Progress Kemp LoadMaster Alert: Multiple RCE and WAF Bypass Flaws Patched Kemp LoadMaster flaws command injection remote execution Kemp LoadMaster Vulnerability WAF Bypass Technique Progress WhatsUp Gold Vulnerabilities

Kemp LoadMaster flaws command injection remote execution Kemp LoadMaster Vulnerability WAF Bypass Technique Progress WhatsUp Gold Vulnerabilities

Progress Kemp LoadMaster Alert: Multiple RCE and WAF Bypass Flaws Patched

Do Son April 21, 2026

The Progress Kemp LoadMaster team has confirmed a significant security event involving five high-severity vulnerabilities affecting its...

ASUSTOR Issues Critical Patch: Command Injection Vulnerability Threatens ADM Users

Do Son April 21, 2026

ASUSTOR has issued an urgent security advisory regarding a high-severity command injection vulnerability impacting its ASUSTOR Data...

Critical 9.4 CVSS Flaw Leaves Dolibarr ERP Open to RCE Dolibarr RCE CVE-2026-23500

Critical 9.4 CVSS Flaw Leaves Dolibarr ERP Open to RCE

Do Son April 20, 2026

A security vulnerability has been identified in Dolibarr ERP & CRM, a popular open-source suite used by...

Critical 9.1 CVSS Bypass in Clerk’s Middleware Gating Clerk Middleware Bypass createRouteMatcher Vulnerability

Critical 9.1 CVSS Bypass in Clerk’s Middleware Gating

Do Son April 20, 2026

A critical security vulnerability has been uncovered in Clerk, a popular user management platform. The flaw, which...

Critical 9.1 Auth Bypass Hits Budibase Operations Platform Budibase Authentication Bypass Regex URL Injection

Critical 9.1 Auth Bypass Hits Budibase Operations Platform

Do Son April 20, 2026

Budibase, the popular open-source platform used by engineers to build internal apps and automations, has issued a...

Root Access Unlocked: FortiSandbox CVE-2026-39808 Details and PoC Exploit Publicly Disclosed FortiSandbox RCE CVE-2026-39808 PoC

Root Access Unlocked: FortiSandbox CVE-2026-39808 Details and PoC Exploit Publicly Disclosed

Do Son April 20, 2026

A critical vulnerability in FortiSandbox has been disclosured. The flaw, tracked as CVE-2026-39808, carries a devastating CVSS...

Dgraph’s Debug Endpoint Hands Over Admin Tokens to Anyone Dgraph Vulnerability CVSS 10.0 Dgraph Admin Leak CVE-2026-40173

Dgraph’s Debug Endpoint Hands Over Admin Tokens to Anyone

Do Son April 19, 2026

Dgraph, the horizontally scalable and distributed GraphQL database known for its ACID transactions and graph-backend performance, is...

OAUTHBEARER Bypass and Sensitive Logging Leaks Hit Apache Kafka Kafka Authentication Bypass JWT Signature Validation Apache Kafka - CVE-2024-27309 & CVE-2024-31141

Kafka Authentication Bypass JWT Signature Validation Apache Kafka - CVE-2024-27309 & CVE-2024-31141

OAUTHBEARER Bypass and Sensitive Logging Leaks Hit Apache Kafka

Do Son April 19, 2026

Security researchers disclose two distinct vulnerabilities affecting Apache Kafka, the cornerstone of high-performance data pipelines and mission-critical...

Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations AVEVA Pipeline Simulation Flaw CVE-2026-5387

Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations

Do Son April 18, 2026

Industrial software giant AVEVA has issued a critical security advisory for its Pipeline Simulation platform, warning of...

Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine Thymeleaf SSTI Bypass CVE-2026-41901 Thymeleaf SSTI CVE-2026-40477

Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine

Do Son April 17, 2026

Thymeleaf, a widely-used modern server-side Java template engine for both web and standalone environments, has released a...

Critical Alert 1 Active Exploit Detected Today