Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which could result in denial of service or remote code execution. For the stable …
In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies …
Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 : Release GSConnect v73 What's Changed Security: fix authenticated path trave…
Two critical vulnerabilities were found in PHP, a widely-used open source general purpose scripting language, which could result in remote execution of arbitra…
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tr…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Two vulnerabilities were discovered in Django, the popular Python web-development framework. CVE-2026-77050 Potential denial-of-service vulnerability in get_su…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Attackers broke into BeyondTrust Remote Support before a patch was ready, then left ways to return to the server.
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulne…
Update to version 0.10.1. This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in ru…
Update to version 3.15.2. Release notes since 3.13.3: https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.0 https://aomedia.googlesource.com/aom/+/refs/tags…
Update to version 0.10.1. This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in ru…
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers…
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content ma…
The fix for CVE-2026-32316 in 1.6-2.1+deb12u2 stopped one string from growing past its limit, but repeating a string with * could still keep appending. A repea…
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing …
Several vulnerabilities were discovered in gst-plugins-bad1.0, a collection of plugins for the GStreamer multimedia framework. Processing specially crafted med…
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.…
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitr…
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstra…
It was discovered that incorrect parsing of Content-Type headers in the Mutt mail user agent could result in denial of service or potentially the execution of …
