…Incorrect-authorization vulnerability that could enable a security-feature bypass. It requires neither authentication nor administrator privileges. CVE-2026-48411 (6.5, medium severity): Incorrect-authorization vulnerability that could enable a security…
…Oracle released security updates to address the vulnerability with its May 2026 Critical Security Patch Update and urged customers to patch their systems immediately. "Oracle continues to periodically receive reports of attempts…
…Cybersecurity and Infrastructure Security Agency (CISA) warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability. Tracked as CVE-2026-45659 , this security flaw stems…
CISA orders feds to patch actively exploited Drupal vulnerability By Sergiu Gatlan May 26, 2026 04:46 AM CISA has given U.S. government agencies until Wednesday evening to secure their servers…
…Max severity Sentry flaw allows code execution as root By Sergiu Gatlan June 10, 2026 02:26 AM Security software company Ivanti has released patches to address two critical vulnerabilities in its…
…Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability to its Known Exploited Vulnerabilities Catalog (KEV) on July 1 , ordering Federal Civilian Executive Branch (FCEB) agencies to secure their servers within three…
…Formerly known as MobileIron Sentry, the Ivanti Sentry security gateway appliance secures traffic between back-end corporate systems and remote mobile devices. Tracked as CVE-2026-10520 , the maximum-severity vulnerability stems…
…Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability ( CVE-2026-54420 ) in the LiteSpeed cPanel user-end…
…After gaining access to a vulnerable Security Management Server or Multi-Domain Security Management Server (MDS), attackers can change the security configuration and security policy. Check Point added that successful exploitation requires…
…Microsoft fixed the YellowKey, GreenPlasma, and MiniPlasma flaws last month as part of the June 2026 Patch Tuesday updates and the RoguePlanet vulnerability in the July security updates . However, the other security…