Vulnerabilities and CVEs
Tue 6 Oct 20264 entries
DSA-6548-1 node-shell-quote - security update
Debian SecurityDSA-6547-1 ruby-jwt - security update
Debian SecurityDSA-6546-1 rails - security update
Debian SecurityMon 5 Oct 202616 entries
Rejetto HFS servers now actively scanned for critical RCE flaw
CVE-2026-61500BleepingComputer
Beta Channel Update for ChromeOS / ChromeOS Flex
Chrome ReleasesMicrosoft security advisory (AV26-1001)
Canadian Centre for Cyber Security
libexpat 2.9.0 fixes two vulnerabilities
CVE-2026-77214CVE-2026-102633oss-security
HPE security advisory (AV26-1000)
Canadian Centre for Cyber Security Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.
CVE-2026-61500Security Affairs
Progress security advisory (AV26-999)
Canadian Centre for Cyber Security CVE-2026-104714: Apache Struts: Shared message formatter exposes date and time values across concurrent requests
CVE-2026-104714oss-security [Control systems] GeoVision security advisory (AV26-998)
Canadian Centre for Cyber Security CVE-2026-104713: Apache Struts: Unbounded request body read in the REST plugin
CVE-2026-104713oss-security CVE-2026-104712: Apache Struts: Disproportionate response size when rendering BigDecimal request parameters
CVE-2026-104712oss-security CVE-2026-104711: Apache Struts: OGNL injection in the legacy RESTful action mapper
CVE-2026-104711oss-security 
CVE-2026-19954: Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names
CVE-2026-19954oss-security Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
CVE-2026-96940The Hacker News