CVE-2026-105239: Apache log4net: NUL character truncates EventLogAppender records
CVE-2026-105239oss-security
Vulnerabilities and CVEs
Wed 7 Oct 202619 entries
CVE-2026-105111: Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS
CVE-2026-105111oss-security CVE-2026-94114: Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser
CVE-2026-94114oss-security Even with OT network visibility, critical infrastructure operators struggle with legacy equipment
Help Net Security
CVE-2026-12405: Foreman Remote Execution: command injection via effective_user (fixed in 16.6.6, 17.2.2, 18.0.1)
CVE-2026-12405oss-security CVE-2026-12423: Foreman: provisioning token validation flaw (fixed in 3.19.2, 5.0.1)
CVE-2026-12423oss-security CVE-2026-12540: Foreman: command injection in foreman-rake errors:fetch_log (fixed in 3.19.2, 5.0.1)
CVE-2026-12540oss-security 
🏴☠️ Termite has just published a new victim : Aon
ransomware.live
SVD-2026-1005: Third-Party Package Updates in Splunk Add-on for Amazon Web Services - September 2026
Splunk
CVE-2026-21589 | Atlassian Data Center Products Unauthenticated Arbitrary File Read Vulnerability
CVE-2026-21589Horizon3.ai
DSA-6549-1 xz-utils - security update
Debian SecurityChrome for Android Update
Chrome ReleasesTue 6 Oct 20261 entry
Ninja Forms plugin flaw exploited to hack WordPress sites
BleepingComputer