Latest news

Chromium CVE-2026-76030: Memory corruption

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…

Chromium CVE-2026-76031: Use after free

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…

CVE-2026-121632: Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping

Posted by Robert Rothenberg on Nov 04 CVE-2026-121632 CPAN Security Group CVE ID: CVE-2026-121632 Distribution: Data-MuForm Versions: through 0.05 MetaCPAN…

USN-8999-1: Pillow vulnerabilities

It was discovered that Pillow incorrectly handled map stride values when loading certain McIdas AREA images. An attacker could possibly use this issue to obtain…

Chrome Beta for Desktop Update

The Beta channel has been updated to 158.0.8127.18 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release…

USN-8998-1: Squid vulnerability

It was discovered that Squid incorrectly handled certain HTTP Transfer- Encoding headers. An attacker could possibly use this issue to perform HTTP request smuggling…

USN-8997-1: Net-SNMP vulnerability

It was discovered that Net-SNMP incorrectly handled newly accepted connections in the SMUX module. An unauthenticated remote attacker could possibly use this issue to…

USN-7530-2: ADOdb vulnerability

USN-7530-1 fixed a vulnerability in ADOdb. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and…

Chrome Beta for iOS Update

Hi everyone! We've just released Chrome Beta 158 (158.0.8127.13) for iOS; it'll become available on App Store in the next few days. You can see a partial list of the…

Making HTTP header injection critical with one prompt

You can now escalate HTTP header injection to a CRLF-Powered Desync and exploit it to serve random users a redirect to your collaborator, in a single prompt. We’ve just…

[Control Systems] Phoenix Contact security advisory (AV26-1121)

Serial number: AV26-1121 Date: November 4, 2026 As of November 4, 2026, Phoenix Contact is affected by vulnerabilities in the following product: PLCnext Engineer Prior…

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management…

Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated…

Cisco UCS Central Software Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or…

HPE security advisory (AV26-1119)

Serial number: AV26-1119 Date: November 4, 2026 As of November 3, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: HPE…

SonicWall warns of unpatched flaws in end-of-life GMS software

SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched.