Vulnerabilities News

Rows of server racks in a data center housing Linux systems

Vulnerabilities 2026-11-10 5 views

OpenSSH SSHole Flaw Exploited as CISA Orders Rapid Patching

Attackers are exploiting the OpenSSH SSHole password bypass on certain musl Linux systems. CISA has listed the flaw and Alpine urges updates and sshd restarts.

Read more →

Server racks in a data center illustrating Linux server security and APT patch management

Vulnerabilities 2026-11-05 17 views

APT Vulnerability Enables Root Code Execution on Debian and Ubuntu

Debian and Ubuntu patch an APT flaw that lets attackers manipulating HTTP downloads replace verified packages and run code as root during software installation.

Read more →

Server racks in a data center illustrating Linux server security and kernel patching

Vulnerabilities 2026-10-31 28 views

Linux Kernel Flaw Prompts Fresh Remote Root Attack Warnings

Linux flaw CVE-2026-98432 enables remote root access in an MPTCP proof of concept. Guidance details interim defenses while some kernel patches remain pending.

Read more →

Server racks and network cables illustrating Node.js application security infrastructure

Vulnerabilities 2026-10-23 25 views

Node2Shell Research Shows Code Execution Through Brotli

Node2Shell research demonstrates code execution through the Node.js Brotli decoder. Fixed releases are available, and firewall protection has important limits.

Read more →

Server racks and network cabling in a data centre illustrating PHP web server security

Vulnerabilities 2026-10-22 26 views

PHP Emergency Patches Fix Two Critical Remote Code Flaws

PHP emergency updates fix two critical remote code execution flaws, prompting urgent patching and precautionary website shutdowns across affected organisations.

Read more →

Server racks in a data centre illustrating NGINX web server security

Vulnerabilities 2026-10-20 29 views

NGINX Vulnerabilities Prompt New Alerts to Apply Patches

New NGINX alerts urge administrators to patch three flaws that can crash servers or potentially execute code, with exposure dependent on server configuration.

Read more →

Server racks and network cabling in a data center, illustrating web server security

Vulnerabilities 2026-10-19 31 views

SiteGuard WAF Flaw Exploited to Run Commands as Root

Attackers exploit SiteGuard Server Edition to run commands as root or SYSTEM. Fixes are available, but administrators must preserve evidence before patching.

Read more →

Rows of black server racks illustrating enterprise remote access security

Vulnerabilities 2026-10-17 27 views

BeyondTrust Zero-Day Exploited in ARMORY CASTLE Attacks

Attackers exploited a BeyondTrust Remote Support zero-day to gain access and deploy backdoors. Self-hosted customers must verify patches and review exposure.

Read more →

Server racks and network cabling in a data center, illustrating Nextcloud server security

Vulnerabilities 2026-10-16 29 views

Collabora Flaw Exploited to Backdoor Nextcloud Servers

Attackers exploit a critical Collabora flaw to plant web shells on Nextcloud servers. Administrators must update or remove the app; disabling it is not enough.

Read more →

Server racks in a data center illustrating enterprise network security

Vulnerabilities 2026-10-15 29 views

Palo Alto Patches PAN-OS CVE-2026-0322 Exploited in Attacks

Palo Alto Networks fixes an exploited PAN-OS flaw that allows authenticated attackers to run code as root, urging updates and restricted management access.

Read more →