News · via SecurityWeek
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.
Vulnerability
Coverage tagged "Vulnerability".
News · via arXiv cs.CR
Natural Code Transformation Confuses Agents in Vulnerability Analysis
arXiv:2610.14350v1 Announce Type: new Abstract: Having demonstrated a strong potential for automating vulnerability discovery, AI agents can also be used to attack software systems at scale. Today's…
News · via arXiv cs.CR
SecReason: Vulnerability Detection and In-Stream Self-Repair for LLM Code Generation
arXiv:2610.14453v1 Announce Type: new Abstract: Large language models (LLMs) may introduce security vulnerabilities into generated code, which can persist into production when verification focuses on…
News · via Splunk
SVD-2026-1006: Advance Notice of Publication of Splunk Security Advisories - October 2026
On October 21, 2026, Splunk PSIRT will publish advisories to disclose security vulnerability advisories for Splunk Enterprise, Universal Forwarder, and SOAR.
News · via AI Incident Database
OpenAI Pulls Three AI-Generated Math Papers Over Sign Error
TL;DR OpenAI withdrew three of its 722 AI-generated math manuscripts on October 7 after a sign error in a Weil-classes proof collapsed the argument. The flaw cascaded into two dependent papers…
News · via BleepingComputer
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files.
News · via Canadian Centre for Cyber Security
Fortinet security advisory (AV26-1037)
Serial Number: AV26-1037 Date: October 13, 2026 As of October 13, 2026, Fortinet is affected by vulnerabilities in the following products: FortiAnalyzer Prior to 7.6.5 Prior to 7.4.8 Prior to 7.6.5…
News · via Canadian Centre for Cyber Security
Esri security advisory (AV26-1036)
Serial number: AV26-1036 Date: October 13, 2026 As of October 13, 2026, Esri is affected by vulnerabilities in the following product: Portal for ArcGIS Prior to 12.2 The Cyber Centre encourages users…
News · via Canadian Centre for Cyber Security
Commvault security advisory (AV26-1033)
Serial number: AV26-1033 Date: October 13, 2026 As of October 13, 2026, Commvault is affected by vulnerabilities in the following products: Commvault Cloud 11.36.0 Prior to 11.36.127 11.40.0 Prior to…
News · via The Hacker News
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it…
News · via BleepingComputer
Windows 11 KB5127648 & KB5126653 cumulative updates released
Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs and add new features.
News · via The Hacker News
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant…
News · via SecurityWeek
Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
News · via The Record
Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit…
News · via oss-security
Nix and Lix: multiple vulnerabilities leading to local root privilege escalation - October 2026
Posted by Thomas GERBET on Oct 13 Hello, The Nix and Lix projects are jointly disclosing a set of vulnerabilities that can be combined to escalate privileges to root on systems running the Nix or Lix…
News · via BleepingComputer
Docker Hub flaw let attackers impersonate users, tamper with images
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT).
News · via Microsoft Security Response Center
CVE-2026-105727 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
News · via Microsoft Security Response Center
CVE-2026-105728 Dynamics Business Central Information Disclosure Vulnerability
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
News · via Microsoft Security Response Center
CVE-2026-102229 Visual Studio Code Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.
News · via Microsoft Security Response Center
CVE-2026-102231 Visual Studio Code Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.