Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu Security Notice USN-8644-1 details fixes for several vulnerabilities in the Linux kernel affecting Ubuntu 18.04 LTS and 16.04 LTS, requiring users to up…
Ubuntu has resolved multiple security vulnerabilities in c3p0, a JDBC connection pooling library, affecting various LTS versions, potentially allowing remote c…
A significant security update for dracut on Rocky Linux 9 addresses a vulnerability allowing root code execution via unescaped error messages, impacting system…
Oracle Linux Security Advisory ELSA-2026-54512 announces the update of gnome-remote-desktop for Oracle Linux 10, addressing CVE-2026-18358 by backporting conne…
Gentoo Linux has issued a high-severity advisory for multiple vulnerabilities in Dnsmasq, including potential remote code execution, urging users to upgrade to…
An important security update for FreeRDP on Rocky Linux 10 addresses a critical remote code execution vulnerability (CVE-2026-55827), impacting the safety of r…
Oracle Linux has released updated OpenSSH packages for version 10, addressing multiple CVEs related to security vulnerabilities, including remote-to-remote cop…
Fedora released an update for WordPress 6.9.5, addressing critical security vulnerabilities including SQL injection issues and potential remote code execution …
Ubuntu released a security notice addressing vulnerabilities in the Linux kernel affecting versions 20.04 and 18.04, necessitating system updates and potential…
A security update addresses three vulnerabilities in jackson libraries affecting SUSE Linux Enterprise Server versions 16.0, enhancing protection from potentia…
ESET found 11 Microsoft-signed UEFI shims, some over a decade old, that let attackers bypass Secure Boot without a single new exploit.11 Old Signed UEFI Shims …
A newly disclosed use-after-free in the Linux kernel's epoll code, CVE-2026-46242, lets an unprivileged user get root on affected Linux and Android systems. A …
Multiple issues where found in u-boot, a cross-platform bootloader for embedded systems, which could lead to information leak and signature verification bypass…
CVE-2026-42530, the NGINX HTTP/3 vulnerability rated CVSS 9.2, is collecting dismissals because exploitation requires ASLR to be disabled or bypassed. Here is …
Metric names and values are now validated to ensure they do not contain characters below ASCII 32 (including newlines), colon (":") or pipe ("|") characters th…
CVE-2026-0257's GlobalProtect authentication bypass went from advisory to active exploitation in four days. The recurring pattern of perimeter device failures …
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in remote code execution, privilege escalation, denial of service or …
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. S…
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service, information leaks, or potentia…
Too many changes to list. See: https://github.com/domoticz/domoticz/blob/2026.1/History.txt This also fixes a security vulnerability.
zabbix a popular network monitoring solution was affected by a vulnerabilty. Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameter…
