NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 5h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 5h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 6h Vulnerability in Sparx Systems Enterprise Architect software · 6h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 6h Vulnerabilities in Slican telephone exchanges · 7h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 10h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 10h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 11h EU Grocers Pay a Steep Price for Unpatched Fridge Firmware · 11h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 5h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 5h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 6h Vulnerability in Sparx Systems Enterprise Architect software · 6h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 6h Vulnerabilities in Slican telephone exchanges · 7h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 10h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 10h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 11h EU Grocers Pay a Steep Price for Unpatched Fridge Firmware · 11h
🛡️
ACyber Sentinel Security Assessment Team
🇬🇧 English 🇮🇷 فارسی 🇸🇦 العربية 🇷🇺 Русский 🇨🇳 中文 🏛️ Latina
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks ⚡ Breaking

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a ...

📰 The Hacker News 🕐 5h ⏱ 7 min read
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

The Hacker News · 5h
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

The Hacker News · 6h
Vulnerability in Sparx Systems Enterprise Architect software

Vulnerability in Sparx Systems Enterprise Architect software

cert.pl · 6h

Latest Intelligence — Page 1 of 24

Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic

Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic

Er is een nieuwe versie van Curl verschenen die meer dan twintig kwetsbaarheden verhelpt, waaronder een beveiligingslek dat remote code execution (RCE) mogelijk...

📰 security.nl 🕐 6h
Vulnerabilities in Slican telephone exchanges

Vulnerabilities in Slican telephone exchanges

Vulnerabilities in Slican telephone exchanges CVE ID CVE-2026-35088 Publication date 15 October 2026 Vendor Slican Product IPx, CCT-1668, MAC-6400, CXS-0424 Vul...

📰 cert.pl 🕐 7h
Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls

Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls

Aanvallers maken actief misbruik van een remote code execution (RCE) kwetsbaarheid in de firewalls van Palo Alto Networks, waardoor de apparaten volledig zijn o...

📰 security.nl 🕐 10h
Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway

Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway

Aanvallers maken door middel van malafide bijlages actief misbruik van een kritieke kwetsbaarheid in de Cisco Secure Email Gateway, zo laat Cisco weten. Er zijn...

📰 security.nl 🕐 10h
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows develop...

📰 The Hacker News 🕐 11h
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

6 Min ReadSource: cagkansayin via Getty ImagesHundreds of French grocers likely lost many millions of dollars this week from cyberattacks that manipulated their...

📰 Dark Reading 🕐 11h
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells a...

📰 The Hacker News 🕐 11h
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, ...

📰 The Hacker News 🕐 11h
CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog with four vulnerabilities affecting Microsoft Windows, Ivanti Connect Secure, Cisco Secure E...

📰 TheCyberThrone 🕐 17h