Vulnerabilities News

Server racks and network cables illustrating Node.js application security infrastructure

Vulnerabilities 2026-10-23 4 views

Node2Shell Research Shows Code Execution Through Brotli

Node2Shell research demonstrates code execution through the Node.js Brotli decoder. Fixed releases are available, and firewall protection has important limits.

Read more →

Server racks and network cabling in a data centre illustrating PHP web server security

Vulnerabilities 2026-10-22 6 views

PHP Emergency Patches Fix Two Critical Remote Code Flaws

PHP emergency updates fix two critical remote code execution flaws, prompting urgent patching and precautionary website shutdowns across affected organisations.

Read more →

Server racks in a data centre illustrating NGINX web server security

Vulnerabilities 2026-10-20 14 views

NGINX Vulnerabilities Prompt New Alerts to Apply Patches

New NGINX alerts urge administrators to patch three flaws that can crash servers or potentially execute code, with exposure dependent on server configuration.

Read more →

Server racks and network cabling in a data center, illustrating web server security

Vulnerabilities 2026-10-19 16 views

SiteGuard WAF Flaw Exploited to Run Commands as Root

Attackers exploit SiteGuard Server Edition to run commands as root or SYSTEM. Fixes are available, but administrators must preserve evidence before patching.

Read more →

Rows of black server racks illustrating enterprise remote access security

Vulnerabilities 2026-10-17 21 views

BeyondTrust Zero-Day Exploited in ARMORY CASTLE Attacks

Attackers exploited a BeyondTrust Remote Support zero-day to gain access and deploy backdoors. Self-hosted customers must verify patches and review exposure.

Read more →

Server racks and network cabling in a data center, illustrating Nextcloud server security

Vulnerabilities 2026-10-16 21 views

Collabora Flaw Exploited to Backdoor Nextcloud Servers

Attackers exploit a critical Collabora flaw to plant web shells on Nextcloud servers. Administrators must update or remove the app; disabling it is not enough.

Read more →

Server racks in a data center illustrating enterprise network security

Vulnerabilities 2026-10-15 21 views

Palo Alto Patches PAN-OS CVE-2026-0322 Exploited in Attacks

Palo Alto Networks fixes an exploited PAN-OS flaw that allows authenticated attackers to run code as root, urging updates and restricted management access.

Read more →

Server racks and a maintenance terminal in a data center illustrating enterprise cybersecurity patching

Vulnerabilities 2026-10-14 22 views

Microsoft Patches Exploited Windows Shell Zero-Day Flaw

Microsoft patches CVE-2026-96951, an exploited Windows Shell flaw that bypasses Mark of the Web protections when users open malicious files sent by attackers.

Read more →

Black server racks in a neutral data center illustrating enterprise network security

Vulnerabilities 2026-10-10 30 views

SonicWall SMA1000 Flaw Draws Reported Exploitation Attempts

Researchers detect attempts to exploit SonicWall SMA1000 flaw CVE-2026-102255. Hotfixes are available, while successful compromise has not yet been confirmed.

Read more →

Close-up of server drive bays illustrating enterprise server security and vulnerability patching

Vulnerabilities 2026-10-07 24 views

Atlassian CVE-2026-21589 Exposes Files Across Eight Products

Atlassian urges patches for CVE-2026-21589 across eight self-hosted products, including Jira and Confluence, to prevent unauthenticated access to known files.

Read more →