Vulnerabilities and CVEs

08:18 Exploited

BeyondTrust patches zero-day exploited in attacks since August

BleepingComputer

08:16 Vulnerability

NCSC-2026-0431 [1.00] [M/H] Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten

NCSC-NL

08:11 Vulnerability

NCSC-2026-0430 [1.00] [M/H] Kwetsbaarheden verholpen in Juniper Networks Junos OS

NCSC-NL

07:50 Patch

Horizon3 and Pax8 Expand Partnership to Bring Autonomous Security Testing to MSPs Across Europe

Horizon3.ai

07:00 Vulnerability

ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability

Zero Day Initiative

06:59 Vulnerability

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

CVE-2025-61624The Hacker News

06:43 Vulnerability

CVE-2026-90910: Apache Answer: Reaction API authorization bypass for restricted content

CVE-2026-90910oss-security

06:41 Vulnerability

CVE-2026-86589: Apache Answer: User Center integration does not revoke first-login sessions after central account suspension

CVE-2026-86589oss-security

06:39 Vulnerability

CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content

CVE-2026-79633oss-security

06:38 Vulnerability

CVE-2026-79624: Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation

CVE-2026-79624oss-security

06:36 Vulnerability

CVE-2026-79620: Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata

CVE-2026-79620oss-security

06:34 Vulnerability

CVE-2026-79613: Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles

CVE-2026-79613oss-security

06:32 Vulnerability

CVE-2026-76994: Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles

CVE-2026-76994oss-security

06:30 Vulnerability

CVE-2026-71563: Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions

CVE-2026-71563oss-security