CVE/vulnerability

Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS…

2 weeks ago

Hackers Exploit Palo Alto Networks PAN-OS Flaw to Bypass MFA and Deploy Ransomware

Ransomware operators are exploiting a vulnerability in Palo Alto Networks PAN-OS that allows them to bypass authentication. This issue enables…

2 weeks ago

Hackers Exploit Zimbra Zero-Click Flaw to Take Control of Email Servers

Hackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to compromise internet-facing…

2 weeks ago

Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws

Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on…

3 weeks ago

Windows BitLocker Vulnerabilities Could Allow Attackers to Bypass Security Protections and Escalate Privileges

Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under…

3 weeks ago

Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution

Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote,…

3 weeks ago

Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information

Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked…

3 weeks ago

Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images

Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This…

3 weeks ago

Critical FortiSandbox Vulnerability Lets Remote Attackers Bypass Authentication and Execute Commands

Fortinet has disclosed a critical authentication bypass vulnerability in FortiSandbox that could let remote attackers access its web management interface…

3 weeks ago

Massive Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days

Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise…

3 weeks ago