Vulnerabilities and CVEs

10:38 Patch

USN-8715-2: Linux kernel (AWS FIPS) vulnerabilities

CVE-2020-24588CVE-2025-27558Ubuntu Security

10:38 Patch

Android apps can now check security patches down to individual device components

Help Net Security

10:38 Vulnerability

NCSC-2026-0384 [1.00] [M/H] Kwetsbaarheid verholpen in Check Point's Security Management and Log Servers

NCSC-NL

10:37 Patch

USN-8714-3: Linux kernel vulnerabilities

CVE-2026-53043CVE-2026-53224Ubuntu Security

09:52 Patch

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

CVE-2026-91843Security Affairs

09:35 Patch

Microsoft fixes broken copy and paste for Excel 2016 users

BleepingComputer

09:14 Patch

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

SecurityWeek

08:00 Patch

Abandoned IoT apps keep sending sensitive data to broken servers

Help Net Security

07:00 Vulnerability

ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Patch

ZDI-CAN-31049: RARLAB

Zero Day Initiative

01:25 Patch

Chrome for Android Update

Chrome Releases

00:42 Vulnerability

AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom

The Register

00:34 Patch

Dev Channel Update for ChromeOS / ChromeOS Flex

Chrome Releases

00:20 Patch

USN-8779-2: Bubblewrap regression

CVE-2026-87766Ubuntu Security

23:23 Vulnerability

CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus

Dark Reading

23:03 Exploited

Cisco alerts customers to second actively exploited zero-day in as many days

CVE-2026-76460CyberScoop

22:17 Vulnerability

100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS

Wordfence