TL;DR VMware disclosed seven Spring GraphQL vulnerabilities and related Spring Cloud flaws on August 20, 2026. All...
Remote Code Execution
TL;DR Dell patched three flaws in its PowerStore T storage family. The most severe, CVE-2026-67271, scores a...
TL;DR The maintainers of vm2 patched three critical flaws on August 17, 2026. The most severe, CVE-2026-47686,...
TL;DR Splunk fixed 17 vulnerabilities across its apps and add-ons on August 19, 2026. The worst, CVE-2026-76404,...
TL;DR CERT Polska reports active exploitation of a Zimbra unauthenticated remote code execution flaw, tracked as CVE-2026-73570....
IBM patched 18 flaws in Db2 Mirror for i this week. The worst bug lets a remote...
TL;DR Security researchers discovered multiple severe vulnerabilities in IBM Documentation Offline. Most notably, a critical IBM remote...
TL;DR A critical flaw in Forminator Forms puts more than 600,000 WordPress sites at risk. Tracked as...
TL;DR CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog. The flaw is a code injection bug...
Red Hat patched five critical bugs in Advanced Cluster Management this week. Two of them allow RHACM...
Researchers at watchTowr published a working exploit for a Citrix NetScaler RCE flaw this week. The bug,...
Roundcube shipped two security updates this week. Also, versions 1.6.18 and 1.7.3 close eleven separate bugs. The...
TL;DR WordPress released version 7.0.4 on August 12, 2026, as a security-only update. It fixes CVE-2026-65640, an...
TL;DR Researchers at V12 Security published a MariaDB remote code execution chain. It runs commands as the...
TL;DR Dell patched two critical flaws in Virtual Storage Integrator (VSI) for VMware vSphere Client. The worst,...
TL;DR Siemens has disclosed CVE-2026-58115, a maximum-severity flaw in SIMATIC IoT2050 Advanced devices. The bug scores a...
TL;DR Zoom released four security bulletins on August 11, 2026. Two of the flaws allow remote code...
TL;DR SonicWall disclosed critical flaws in its GMS and Email Security products on August 11, 2026. The...
TL;DR SAP released its August 2026 Patch Day on August 11, with 28 new security notes. The...
TL;DR CVE-2026-63077 is a critical unauthenticated remote code execution flaw in JetBrains TeamCity. An attacker who reaches...
TL;DR WordPress 7.0.3 is out as a security release. This WordPress security update fixes about a dozen...
TL;DR Cisco disclosed two Cisco IMC vulnerabilities in the web-based management interface. The more serious one, CVE-2026-20200,...