CVE/vulnerability
Node.js Patches 10 Security Vulnerabilities, Including High-Severity RCE Flaw
The Node.js Project released security updates on October 21, 2026, addressing 10 vulnerabilities across its 26.x, 24.x, and 22.x release lines.
The updates fix...
CVE/vulnerability
PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution
PHP released emergency security updates to address two critical vulnerabilities that could allow unauthenticated attackers to execute code on vulnerable servers.
These vulnerabilities are...
CVE/vulnerability
GitLab Patches Critical 10.0 RCE Vulnerability Allowing Unauthenticated Remote Code Execution
GitLab has released emergency security updates to address a critical remote code execution vulnerability that could allow unauthenticated attackers to execute arbitrary code on...
Chrome
Google Chrome 156 Fixes 353 Security Vulnerabilities, Including 6 Critical Flaws
Google released Chrome version 156 to the stable channel for Windows, macOS, and Linux, addressing 353 security vulnerabilities, including six critical flaws.
Announced on...
CVE/vulnerability
Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks
Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows unauthenticated attackers to turn arbitrary file...
CVE/vulnerability
Oracle Releases 1,295 Security Patches to Fix Critical Vulnerabilities Across Multiple Products
Oracle has released its October 2026 Critical Patch Update, which includes 1,295 new security patches across its enterprise portfolio. Published on October 20, the...
CVE/vulnerability
Apache Tomcat Security Flaws Allow Attackers to Bypass Authentication and Expose User Data
Apache disclosed eight vulnerabilities in Tomcat, including authentication bypass, cross-user data exposure, insecure socket access, and cryptographic configuration failures.
Of these, three are rated...
CVE/vulnerability
Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk
The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0.
This warning, published...