Tag: vulnerability
-
OpenSSH 10.6 Fixes Security Flaws Including SSH Plaintext Recovery Attack
OpenSSH released version 10.6 on October 6, 2026, to address security vulnerabilities that affect encrypted sessions, file transfers, authentication, and forwarding controls. This update mitigates a plaintext recovery attack that exploits shared compression states across multiplexed SSH channels and introduces compatibility changes, while accelerating the project’s security release schedule. OpenSSH 10.6 Fixes Security Flaws The…
-
Elastic Patches 14 Security Flaws, Including One Enabling Cross-Tenant Data Interception
Elastic published 14 security advisories addressing various vulnerabilities in Elasticsearch, Kibana, and Elastic Agent/Endpoint. Among these, a high-severity Kibana authorization bypass vulnerability allows for cross-tenant data interception. Other issues include information disclosure and denial-of-service weaknesses in Elasticsearch, along with a flaw in Elastic Endpoint that affects Windows protection capabilities. The advisory list consists of ten…
-
Elastic Patches 14 Security Flaws, Including One Enabling Cross-Tenant Data Interception
Elastic published 14 security advisories addressing various vulnerabilities in Elasticsearch, Kibana, and Elastic Agent/Endpoint. Among these, a high-severity Kibana authorization bypass vulnerability allows for cross-tenant data interception. Other issues include information disclosure and denial-of-service weaknesses in Elasticsearch, along with a flaw in Elastic Endpoint that affects Windows protection capabilities. The advisory list consists of ten…
-
Critical Veeam Backup Replication Flaw Allows Low-Privileged Users to Execute Remote Code
Veeam released security updates to address a critical vulnerability that lets low-privileged users execute remote code on Veeam Backup Servers. Identified as CVE-2025-64393, this flaw has a CVSS v4.0 score of 9.4 and was resolved in Veeam Backup & Replication version 12.3.2 P4, build 12.3.2.4934, released on October 6, 2026. The vulnerability affects build 12.3.2.4854…
-
Anthropic Creates Three Tiers for Claude Cyber Access
Anthropic created three access tiers for Claude’s offensive security use, matching cyber capabilities and safeguards to the user’s level of trust. Anthropic is trying to solve the difficult balance between using AI for cybersecurity and preventing misuse. The same model that helps security teams fix vulnerabilities can also help attackers break into systems. Its answer,…
-
Fehlersuche per KI: IBM und Red Hat finden mehr als 400 Bugs in Java Code
Das gemeinsame Projekt Lightwell nutzt KI-Agenten zum Aufspüren von Schwachstellen in Open-Source-Software – und zur Entwicklung der benötigten Patches. First seen on golem.de Jump to article: www.golem.de/news/fehlersuche-per-ki-ibm-und-red-hat-finden-mehr-als-400-bugs-in-java-code-2610-213801.html
-
Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws
Anthropic on Tuesday said it’s expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026.The company said it also found an additional First…
-
Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One
Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/pwn2own-hackers-32-zeroday/
-
Check your X.Org server version because a dozen vulnerabilities have been patched
X.Org fixed 12 security flaws in the X server and Xwayland, with the repairs shipping in xorg-server 21.1.25 and xwayland-24.1.14. Nine of the flaws can lead to arbitrary code … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/07/x-org-server-fixed-vulnerabilities/
-
Path Traversal in Seitenvorlagen Schwachstelle ermöglicht Remote Code Execution
First seen on security-insider.de Jump to article: www.security-insider.de/wordpress-luecke-unauth-lfi-codeausfuehrung-cve-2026-87902-a-553ae1bb6eb233e4831daf3bfcaec677/
-
WordPress RCE Risk: How Malicious HEIC Uploads Can Execute Server Code
Researchers demonstrated a WordPress attack using malicious HEIC uploads to trigger remote code execution on servers with vulnerable image-processing software. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-wordpress-heic-rce-attack/
-
Coast Guard Boardings of Hacked Vessels: New Details
US-Bound Supertankers Hacked Using Known Vulnerabilities, Says Official. Two cyberattacks on U.S.-bound supertankers in August, which led to them being boarded by Coast Guard and FBI cyber specialists, exploited known, unpatched vulnerabilities in on-board systems, a federal official said this week. This was preventable, the official told ISMG. First seen on govinfosecurity.com Jump to article:…
-
Ninja Forms plugin flaw exploited to hack WordPress sites
Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ninja-forms-plugin-flaw-exploited-to-hack-wordpress-sites/
-
AI slop overwhelms Google’s OSS bug bounty programme
Google has closed its open source vulnerability reporting programme to new submissions while it recalibrates in the face of a surge in automated junk reports. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651792/AI-slop-overwhelms-Googles-OSS-bug-bounty-programme
-
AI slop overwhelms Google’s OSS bug bounty programme
Google has closed its open source vulnerability reporting programme to new submissions while it recalibrates in the face of a surge in automated junk reports. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651792/AI-slop-overwhelms-Googles-OSS-bug-bounty-programme
-
Atlassian warns of critical file-access flaw in Jira, Confluence
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/
-
IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
The tech giant’s announcement underscores the insufficiency of companies’ existing software supply-chain security practices. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ibm-ai-vulnerability-java-lightwell/832249/
-
Six Months After Mythos, Here’s How AI Is Shaking Up Vulnerability Management: Experts
The arrival of ultra-powerful AI models for vulnerability discovery that began with Anthropic’s Claude Mythos earlier this year has jolted the industry into making widespread changes in exposure management practices in just six months”, though the challenges remain steep for many organizations, cybersecurity experts tell CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2026/six-months-after-mythos-here-s-how-ai-is-shaking-up-vulnerability-management-experts
-
CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely
Microsoft released emergency updates for Exchange Server to fix CVE-2026-96940, a high-severity flaw that can let attackers gain higher privileges. Microsoft has released out-of-band security updates for Exchange Server to fix a high-severity vulnerability tracked as CVE-2026-96940 (CVSS score of 8.8). The flaw is caused by weak authorization and can allow an authenticated attacker to…
-
Fehlerhafte Autorisierung Commerce-Schwachstelle verschafft Zugriff auf sensible Daten
First seen on security-insider.de Jump to article: www.security-insider.de/adobe-commerce-magento-cve-2026-71362-aktiv-ausgenutzt-a-c4fcb09f2de1639a19ad34a7b0f845ad/
-
Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/red-hat-lightwell-remediates-400/
-
Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)
Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/06/atlassian-data-center-cve-2026-21589/
-
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows.The ecosystem around it fell short. Earlier this year, our team at OX Security, traced…
-
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows.The ecosystem around it fell short. Earlier this year, our team at OX Security, traced…
-
Dell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)
Dell is urging customers to patch a vulnerability (CVE-2026-86360) in Dell System Update (DSU) that could allow an unauthenticated remote attacker to execute arbitrary code … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/06/dell-system-update-vulnerability-cve-2026-86360/
-
Apache Struts Vulnerabilities Enable Remote Code Execution, DoS and Data Disclosure
Four Apache Struts vulnerabilities outlined in recent advisories expose affected applications to risks such as remote code execution, denial of service, and cross-user data disclosure. These issues impact legacy action mapping, decimal rendering, REST request processing, and localized message formatting. Fixes are available in Struts versions 7.4.0 and 6.12.0. The advisories, published between August 3…
-
IBM Patches Multiple Langflow OSS Flaws Including Two Critical RCE Vulnerabilities
IBM has disclosed 25 vulnerabilities in Langflow OSS, affecting versions 1.0.0 through 1.12.2. Two of these are critical flaws that allow unauthenticated remote code execution. The security bulletin recommends upgrading to version 1.12.3, and it does not list any workarounds. Langflow provides a visual environment for building AI agents and workflows, featuring customization with Python…
-
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software.The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward. Reports about supply chain compromises are still accepted, and…
-
Critical WatchGuard Endpoint Security Flaw Exposes Kernel and Process Memory
A critical vulnerability exists in WatchGuard endpoint security products that could allow a local, authenticated attacker to bypass driver authentication and access sensitive kernel and process memory. This vulnerability is tracked as CVE-2026-13043 and has a reported CVSS score of 9.3. It affects the Panda Kernel Memory Access Driver (pskmad.sys), as noted in an advisory…
-
Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center
Atlassian has announced a critical vulnerability related to arbitrary file access that affects Jira Software Data Center and Confluence Data Center. This vulnerability, tracked as CVE-2026-21589, has a CVSS score of 9.3 and allows unauthenticated attackers to access specific files within the web root directories of the affected applications without needing valid credentials or accounts.…