Tag:
Vulnerability
CVE/vulnerability
CISA Warns of Actively Exploited Microsoft Outlook Zero-Day Vulnerability
The Cybersecurity and Infrastructure Security Agency has added CVE-2026-124194, an actively exploited Microsoft Outlook spoofing vulnerability, to its Known Exploited Vulnerabilities catalog.
Added on...
CVE/vulnerability
Critical MongoDB Use-After-Free Vulnerability Allows Remote Code Execution Without Authentication
MongoDB has patched a critical use-after-free flaw, tracked as CVE-2026-118383 with a CVSS score of 9.5, that unauthenticated attackers can exploit over the network....
Chrome
Google Chrome Fixes 83 Security Flaws, Including 5 Critical Use-After-Free Vulnerabilities
Google released a Chrome desktop security update that addresses 83 vulnerabilities, including five critical use-after-free flaws affecting ServiceWorker, CSS, Layout, Skia, and Accessibility.
Published...
CVE/vulnerability
Palo Alto Networks Patches PAN-OS Vulnerability Allowing Remote Code Execution With Root Privileges
Palo Alto Networks has released fixes for CVE-2026-0330, a remote code execution vulnerability affecting PAN-OS software running on Panorama.
The flaw allows an authenticated...
CVE/vulnerability
Apache HTTP Server Patches Critical RCE Vulnerability Allowing Attackers to Execute Remote Code
Apache has released HTTP Server 2.4.71 to address three security vulnerabilities, including a critical memory corruption flaw that could enable remote code execution.
Released...
CVE/vulnerability
Node.js Patches 16 Security Vulnerabilities Allowing Remote Server Crashes, Memory Leaks, and Authentication Bypass
The Node.js Project released security updates on November 11, 2026, for the 26.x, 24.x, and 22.x lines. They fix 16 vulnerabilities: 7 high, 6...
CVE/vulnerability
Fortinet2Shell Vulnerability Lets Hackers Execute Code on FortiClient Systems Through Malicious Websites
Fortinet has patched a critical flaw in FortiClient that lets attackers run code on a victim's computer through a malicious website. The bug is...
CVE/vulnerability
Windows Active Directory RCE and DoS Vulnerabilities Put Windows Systems at Risk
Microsoft disclosed two Windows Active Directory vulnerabilities on November 10, 2026, exposing affected systems to remote code execution and denial of service. Tracked as...