CVE/vulnerability

Apache Camel Vulnerabilities Allow Remote Code Execution, Authentication Bypass, and Data Theft

Apache Camel’s security advisories document critical and high-severity vulnerabilities that could allow for remote code execution, authentication bypass, credential exposure,…

2 weeks ago

Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens

A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft…

2 weeks ago

Cloudflare Adds New WAF Rules to Detect Attacks Targeting CVE-2026-111497

Cloudflare announced an emergency release of its Web Application Firewall (WAF) on October 25, 2026. This update introduces two detection…

2 weeks ago

Hacker Demonstrates PHP Remote Code Execution in StealMyBitcoin Challenge, Shares Exploit

A security researcher has successfully demonstrated a PHP remote code execution (RCE) exploit against the Steal My Bitcoin challenge. This…

2 weeks ago

Tailscale SSH Vulnerabilities Allow Attackers to Gain Root Access to Connected Servers

Security researchers have revealed multiple high-severity vulnerabilities in Tailscale and Headscale that could let attackers gain root access to connected…

2 weeks ago

Critical Okta Access Gateway Vulnerability Enables Remote Command Execution

A critical command execution vulnerability has been identified in Okta Access Gateway (OAG), which could allow an authenticated administrator to…

2 weeks ago

Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems

Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system.…

2 weeks ago

Critical Oracle Java Flaw With CVSS 9.1 Allows Unauthenticated Remote Attacks

Oracle issued a security alert for CVE-2026-91403, a critical vulnerability affecting Oracle Java SE and GraalVM. Attackers can exploit this…

2 weeks ago

Critical Unpatched Linux Kernel Vulnerabilities Accidentally Disclosed, Including Two Remote Code Execution Flaws

In October, several unpatched Linux vulnerabilities were disclosed on public mailing lists, revealing technical details before fixes were widely available.…

2 weeks ago

Fortinet Releases Critical Security Updates for FortiOS, FortiManager, and FortiAnalyzer

Fortinet has announced coordinated security hardening updates for FortiOS, FortiManager, and FortiAnalyzer, scheduled for October 22, 2026. These updates aim…

2 weeks ago