CVE/vulnerability
Critical Oracle Java Flaw With CVSS 9.1 Allows Unauthenticated Remote Attacks
Oracle issued a security alert for CVE-2026-91403, a critical vulnerability affecting Oracle Java SE and GraalVM. Attackers can exploit this vulnerability remotely without authentication....
CVE/vulnerability
Signal Vulnerability Could Keep Microphone Active Even After Users Hang Up
A critical vulnerability in Signal's RingRTC calling library could let a malicious call participant keep receiving audio after another user tries to hang up....
CVE/vulnerability
Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution
Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote, unauthenticated attackers to execute...
CVE/vulnerability
Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information
Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as CVE-2026-108185, could allow...
CVE/vulnerability
Massive Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days
Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise defenders must address immediately....
cyber security
Critical Ghostscript Vulnerability Lets Malicious PDFs Trigger Remote Code Execution
A critical vulnerability in Ghostscript could allow attackers to execute code on vulnerable servers by uploading a specially crafted PDF containing a malicious JPEG...
CVE/vulnerability
Critical Progress MarkLogic Server Vulnerabilities Could Enable Code Execution and Privilege Escalation
Progress has disclosed 31 vulnerabilities in MarkLogic Server that could lead to privilege escalation, server-side code execution, authentication bypass, credential exposure, and data compromise....
CVE/vulnerability
Critical Google DevSite Flaw Allowed Attackers to Execute Remote Code Without Authentication
A critical security vulnerability in Google's shared DevSite platform could have let unauthenticated attackers execute arbitrary code on Google-hosted services by forging Flask session...