Vulnerability

Tailscale SSH Vulnerabilities Allow Attackers to Gain Root Access to Connected Servers

Security researchers have revealed multiple high-severity vulnerabilities in Tailscale and Headscale that could let attackers gain root access to connected…

2 weeks ago

Critical Okta Access Gateway Vulnerability Enables Remote Command Execution

A critical command execution vulnerability has been identified in Okta Access Gateway (OAG), which could allow an authenticated administrator to…

2 weeks ago

Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems

Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system.…

2 weeks ago

Critical Citrix NetScaler RCE Vulnerability Under Active Attack as Hackers Deliver FreeBSD Malware

Citrix NetScaler ADC and Gateway appliances are under active attack via CVE-2026-88771, a critical, unauthenticated remote code execution vulnerability that…

2 weeks ago

Critical Oracle Java Flaw With CVSS 9.1 Allows Unauthenticated Remote Attacks

Oracle issued a security alert for CVE-2026-91403, a critical vulnerability affecting Oracle Java SE and GraalVM. Attackers can exploit this…

2 weeks ago

Critical Unpatched Linux Kernel Vulnerabilities Accidentally Disclosed, Including Two Remote Code Execution Flaws

In October, several unpatched Linux vulnerabilities were disclosed on public mailing lists, revealing technical details before fixes were widely available.…

2 weeks ago

Critical Cisco Expressway Flaw Lets Attackers Execute Commands as Root

Cisco has released security updates to address a critical vulnerability in its Expressway Series. This flaw, tracked as CVE-2026-76466, could…

2 weeks ago

Fortinet Releases Critical Security Updates for FortiOS, FortiManager, and FortiAnalyzer

Fortinet has announced coordinated security hardening updates for FortiOS, FortiManager, and FortiAnalyzer, scheduled for October 22, 2026. These updates aim…

2 weeks ago

Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code

Siemens has confirmed that the CVE-2026-110936 vulnerability, a DLL side-loading flaw in Siemens Software Center, is being actively exploited. Attackers…

2 weeks ago

Node.js Patches 10 Security Vulnerabilities, Including High-Severity RCE Flaw

The Node.js Project released security updates on October 21, 2026, addressing 10 vulnerabilities across its 26.x, 24.x, and 22.x release…

2 weeks ago