Vulnerabilities and CVEs

19:16 Vulnerability

Researchers used Claude to hack OpenAI employees' ChatGPT accounts

The Register

18:58 Patch

Chrome Dev for Android Update

Chrome Releases

18:56 Patch

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

The Hacker News

18:43 Patch

Chrome Dev for Desktop Update

Chrome Releases

18:24 Vulnerability

CVE-2026-91867: Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely

CVE-2026-91867oss-security

18:22 Patch

CVE-2026-91866: Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service

CVE-2026-91866oss-security

18:20 Vulnerability

CVE-2026-91865: Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service

CVE-2026-91865oss-security

18:17 Vulnerability

CVE-2026-91864: Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion

CVE-2026-91864oss-security

18:15 Patch

CVE-2026-91863: Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

CVE-2026-91863oss-security

18:00 Vulnerability

Gyazo server flaw exploited to steal 23.6 million user records

BleepingComputer

17:40 Patch

Google security advisory (AV26-939)

Canadian Centre for Cyber Security

17:40 Patch

The Patch Gap Is Structural. Here Is What That Means for Your SOC.

Halcyon

17:24 Patch

[Control Systems] Moxa security advisory (AV26-938)

CVE-2026-15579Canadian Centre for Cyber Security

16:25 Vulnerability

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeek

16:09 Patch

[Control systems] Advantech security advisory (AV26-937)

Canadian Centre for Cyber Security

16:00 Vulnerability

CVE-2026-88097 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2026-88097Microsoft Security Response Center

15:58 Patch

CVE-2026-91843: Check Point Root RCE

CVE-2026-91843SOCRadar

15:50 Vulnerability

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability

Cisco PSIRT

15:50 Patch

Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026

Cisco PSIRT

15:50 Vulnerability

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability

Cisco PSIRT