Vulnerabilities and CVEs news, page 51 | Cyber Security News

Fri 23 Oct 202620 entries

16:00 Vulnerability

Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

Cisco PSIRT

15:43 Exploited

Arista Networks security advisory (AV26-1080)

CVE-2026-114625Canadian Centre for Cyber Security

Canadian Centre for Cyber Security

15:43 Vulnerability

PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)

SANS Internet Storm Center

15:19 Vulnerability

HPE security advisory (AV26-1079)

Canadian Centre for Cyber Security

Canadian Centre for Cyber Security

15:00 Patch

MongoDB security advisory (AV26-1078)

Canadian Centre for Cyber Security

Canadian Centre for Cyber Security

14:48 Patch

HPE patches eight max severity RCE and auth bypass AOS flaws

BleepingComputer

HPE patches eight max severity RCE and auth bypass AOS flaws

14:45 Vulnerability

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

SecurityWeek

SecurityWeek

14:00 Exploited

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-114625CISA

13:58 Patch

Chrome Dev for Android Update

Chrome Releases

13:33 Patch

BlackFog Patches All Servers Following Critical PHP Vulnerabilities

BlackFog

BlackFog Patches All Servers Following Critical PHP Vulnerabilities

13:25 Patch

URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

CVE-2026-115560The Hacker News

URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

12:52 Patch

PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet

CVE-2026-109618CVE-2026-109619Security Affairs

PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet

11:58 Exploited

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

SecurityWeek

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

11:55 Vulnerability

NCSC-2026-0453 [1.00] [M/H] Kwetsbaarheid in Google Brotli-decoder

NCSC-NL

11:36 Vulnerability

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

CVE-2026-112900The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

10:35 Patch

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

The Hacker News

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

10:16 Exploited

CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access

CVE-2026-114625SOCRadar

CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access

10:13 Patch

Chrome Stable for iOS Update

Chrome Releases

09:54 Patch

Atlassian Patches 75 Flaws in Data Center and Server Products

SecurityWeek

SecurityWeek

09:50 Vulnerability

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

CVE-2026-111497The Hacker News

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data