CVE/vulnerability
Researchers Discover 6 Zero-Day Vulnerabilities in Danfoss Refrigeration Controllers Allowing Remote Root Access
Midnight Blue researcher Carlo Meijer found six pre-authentication remote code execution zero-days in the Danfoss AK-SM800A refrigeration controller. He found them in under an hour of manual firmware review....
CVE/vulnerability
Critical Red Hat Quay Vulnerability Allows Hackers to Hijack Private Container Registries
Red Hat has announced a critical vulnerability in Red Hat Quay that may allow unauthenticated attackers to take over a registry's signing key, thereby...
Chrome
Google Chrome Fixes 83 Security Flaws, Including 5 Critical Use-After-Free Vulnerabilities
Google released a Chrome desktop security update that addresses 83 vulnerabilities, including five critical use-after-free flaws affecting ServiceWorker, CSS, Layout, Skia, and Accessibility.
Published...
CVE/vulnerability
PoC Exploit Released for Critical Cisco Expressway RCE Vulnerability With CVSS 9.8 Score
A public proof-of-concept exploit is now available for CVE-2026-76466, a critical flaw in Cisco Expressway that lets an unauthenticated attacker run commands as root....
CVE/vulnerability
Apache HTTP Server Patches Critical RCE Vulnerability Allowing Attackers to Execute Remote Code
Apache has released HTTP Server 2.4.71 to address three security vulnerabilities, including a critical memory corruption flaw that could enable remote code execution.
Released...
CVE/vulnerability
Node.js Patches 16 Security Vulnerabilities Allowing Remote Server Crashes, Memory Leaks, and Authentication Bypass
The Node.js Project released security updates on November 11, 2026, for the 26.x, 24.x, and 22.x lines. They fix 16 vulnerabilities: 7 high, 6...
CVE/vulnerability
N-able Warns of Critical N-central Zero-Day Vulnerability Actively Exploited by Hackers
N-able has warned that attackers are actively scanning for vulnerable N-central servers after the publication of proof-of-concept (PoC) code related to critical flaws in...
CVE/vulnerability
Windows Active Directory RCE and DoS Vulnerabilities Put Windows Systems at Risk
Microsoft disclosed two Windows Active Directory vulnerabilities on November 10, 2026, exposing affected systems to remote code execution and denial of service. Tracked as...
CVE/vulnerability
Ivanti Patches Critical SQL Injection Flaw Allowing Remote Code Execution Without Login
Ivanti has released November 2026 security updates for Endpoint Manager (EPM), Endpoint Manager Mobile (EPMM), Sentry, Cloud Services Application (CSA), and User Workspace Manager...
CVE/vulnerability
Critical SAP PROXYGATE and ICM2SHELL Vulnerabilities Allow Server Takeover Without Authentication
SAP has patched three critical vulnerabilities, grouped as PROXYGATE and ICM2SHELL, that let attackers take control of affected SAP systems without authentication.
Discovered by...
CVE/vulnerability
Critical Fortinet Vulnerabilities Allow Unauthenticated Attackers to Execute Remote Code on FortiManager and FortiAnalyzer
Fortinet disclosed critical vulnerabilities in FortiManager, FortiAnalyzer, and FortiOS on November 10, 2026, including flaws that could let attackers execute code without logging in.
The...