CVE/vulnerability

Fortinet Releases Critical Security Updates for FortiOS, FortiManager, and FortiAnalyzer

Fortinet has announced coordinated security hardening updates for FortiOS, FortiManager, and FortiAnalyzer, scheduled for October 22, 2026. These updates aim…

2 weeks ago

Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code

Siemens has confirmed that the CVE-2026-110936 vulnerability, a DLL side-loading flaw in Siemens Software Center, is being actively exploited. Attackers…

2 weeks ago

Signal Vulnerability Could Keep Microphone Active Even After Users Hang Up

A critical vulnerability in Signal's RingRTC calling library could let a malicious call participant keep receiving audio after another user…

2 weeks ago

Node.js Patches 10 Security Vulnerabilities, Including High-Severity RCE Flaw

The Node.js Project released security updates on October 21, 2026, addressing 10 vulnerabilities across its 26.x, 24.x, and 22.x release…

2 weeks ago

PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution

PHP released emergency security updates to address two critical vulnerabilities that could allow unauthenticated attackers to execute code on vulnerable…

2 weeks ago

GitLab Patches Critical 10.0 RCE Vulnerability Allowing Unauthenticated Remote Code Execution

GitLab has released emergency security updates to address a critical remote code execution vulnerability that could allow unauthenticated attackers to…

2 weeks ago

Google Chrome 156 Fixes 353 Security Vulnerabilities, Including 6 Critical Flaws

Google released Chrome version 156 to the stable channel for Windows, macOS, and Linux, addressing 353 security vulnerabilities, including six…

2 weeks ago

Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks

Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows unauthenticated attackers…

2 weeks ago

Oracle Releases 1,295 Security Patches to Fix Critical Vulnerabilities Across Multiple Products

Oracle has released its October 2026 Critical Patch Update, which includes 1,295 new security patches across its enterprise portfolio. Published…

2 weeks ago

Apache Tomcat Security Flaws Allow Attackers to Bypass Authentication and Expose User Data

Apache disclosed eight vulnerabilities in Tomcat, including authentication bypass, cross-user data exposure, insecure socket access, and cryptographic configuration failures. Of…

2 weeks ago