Vulnerabilities and CVEs
Tue 27 Oct 202617 entries
Securing Edge & Physical AI: Post-Quantum IoT Blockchain for Mission-Critical Cyber-Physical Agents
arXiv cs.CR Long Term Support Channel Update for ChromeOS
Chrome ReleasesBrotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)
CVE-2026-111497Tenable
Re: PHP 5.4.23 (custom 5.4-5.6) backported patch for PHP2Shell OOM vulnerability (CVE-2026-109618)
CVE-2026-109618oss-security
Experts temper emergency-level alarms over critical Brotli defect
CVE-2026-111497CyberScoop
The Impact of AI on CVEs: Industry Challenges
JFrog Security Research
Apple Patches for October 2026, (Mon, Oct 26th)
CVE-2026-86950SANS Internet Storm Center
CVE-2026-111422: Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host
CVE-2026-111422oss-security DSA-6586-1 valkey - security update
Debian SecurityDSA-6585-2 thunderbird - regression update
Debian SecurityDSA-6589-1 php-mongodb - security update
Debian SecurityDSA-6588-1 openjdk-21 - security update
Debian SecurityDSA-6587-1 pdns - security update
Debian SecurityElectroNG is now open source!
Doyensec
Mon 26 Oct 20263 entries
CVE-2025-60467: GPAC/MP4Box: Use-After-Free in gf_filter_pid_inst_swap_delete_task on crafted MPEG-2 TS file
CVE-2025-60467oss-security