Vulnerability

PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution

PHP released emergency security updates to address two critical vulnerabilities that could allow unauthenticated attackers to execute code on vulnerable…

2 weeks ago

Google Chrome 156 Fixes 353 Security Vulnerabilities, Including 6 Critical Flaws

Google released Chrome version 156 to the stable channel for Windows, macOS, and Linux, addressing 353 security vulnerabilities, including six…

2 weeks ago

Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks

Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows unauthenticated attackers…

2 weeks ago

Apache Tomcat Security Flaws Allow Attackers to Bypass Authentication and Expose User Data

Apache disclosed eight vulnerabilities in Tomcat, including authentication bypass, cross-user data exposure, insecure socket access, and cryptographic configuration failures. Of…

2 weeks ago

Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS…

2 weeks ago

Hackers Exploit Palo Alto Networks PAN-OS Flaw to Bypass MFA and Deploy Ransomware

Ransomware operators are exploiting a vulnerability in Palo Alto Networks PAN-OS that allows them to bypass authentication. This issue enables…

2 weeks ago

Rank Math PRO WordPress Plugin Compromised to Spread Malware and Steal Credentials

Rank Math has reported a security incident involving malware distributed through Rank Math PRO version 3.0.123. They warn that WordPress…

2 weeks ago

Hackers Exploit Zimbra Zero-Click Flaw to Take Control of Email Servers

Hackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to compromise internet-facing…

2 weeks ago

Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet

Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single…

3 weeks ago

Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws

Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on…

3 weeks ago