Vulnerabilities and CVEs news, page 50 | Cyber Security News

Sat 24 Oct 20265 entries

00:22 Patch

Re: Godot 4.x: heap out-of-bounds read in OptimizedTranslation message lookup

oss-security

00:20 Patch

Re: Godot 4.x: heap out-of-bounds write via negative string length in binary resource loader

oss-security

00:18 Patch

Re: Godot 4.x: heap out-of-bounds write in Radiance HDR image loader

CVE-2026-110734oss-security

00:16 Vulnerability

CVE-2026-113877: HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions

CVE-2026-113877oss-security

00:00 Patch

DSA-6583-1 libheif - security update

Debian Security

Fri 23 Oct 202615 entries

23:07 Vulnerability

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 12, 2026 to October 18, 2026)

Wordfence

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 12, 2026 to October 18, 2026)

22:55 Vulnerability

Abandoned Popcorn Time app exposed millions of device to RCE attacks

BleepingComputer

Abandoned Popcorn Time app exposed millions of device to RCE attacks

22:28 Exploited

One Week, Five Flaws, Same Weak Point: The Management Layer

Halcyon

Halcyon

22:04 Vulnerability

(Reliable)? php2shell exploitability, (Fri, Oct 23rd)

SANS Internet Storm Center

20:13 Patch

Ruby Regexp compilation fixes related to GitLab's CVE's

oss-security

20:07 Patch

PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches

CVE-2026-115560Security Affairs

Security Affairs

19:54 Patch

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

The Hacker News

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

19:05 Patch

Microsoft: Windows Server 2016 reaches end of support in January

BleepingComputer

Microsoft: Windows Server 2016 reaches end of support in January

18:41 Vulnerability

PHP Informational advisory: Session upload progress (CVE-2026-115560)

CVE-2026-115560oss-security

18:28 Patch

Chrome Dev for Desktop Update

Chrome Releases

18:08 Vulnerability

Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication

SpecterOps

Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication

17:38 Patch

Metasploit Wrap Up: Langflow, MongoDB, and More

CVE-2026-93680CVE-2026-0768Rapid7

Metasploit Wrap Up: Langflow, MongoDB, and More

17:38 Patch

PHP shares mitigation for new RCE vulnerability with no patch

BleepingComputer

PHP shares mitigation for new RCE vulnerability with no patch

16:16 Vulnerability

Fortinet security advisory (AV26-1081)

Canadian Centre for Cyber Security

Canadian Centre for Cyber Security

16:00 Vulnerability

CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability

CVE-2026-83862Microsoft Security Response Center