Vulnerabilities and CVEs

15:31 Patch

Citrix security advisory (AV26-1023)

CVE-2026-107406Canadian Centre for Cyber Security

15:00 Vulnerability

OpenAI GPT-6.1 Sol: An evaluation

Sonar

14:59 Patch

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

The Hacker News

14:47 Vulnerability

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

The Hacker News

14:47 Vulnerability

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

CVE-2026-105133The Hacker News

14:32 Patch

Max severity SonicWall SMA1000 flaw now exploited in attacks

CVE-2026-102255BleepingComputer

14:26 Vulnerability

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring

CVE-2026-47483Help Net Security

14:21 Exploited

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

CVE-2015-3306The Hacker News

13:58 Vulnerability

USN-8911-1: Linux kernel (OEM) vulnerabilities

Ubuntu Security

12:31 Vulnerability

CVE-2026-108039: Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits

CVE-2026-108039oss-security

12:29 Vulnerability

CVE-2026-107938: Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.

CVE-2026-107938oss-security

12:27 Vulnerability

CVE-2026-107937: Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.

CVE-2026-107937oss-security

12:25 Vulnerability

CVE-2026-100227: Apache CXF: XML Signature wrapping in JAX-RS XML Security

CVE-2026-100227oss-security

12:23 Exploited

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

CVE-2026-105133CVE-2026-105134SecurityWeek

12:23 Vulnerability

CVE-2026-97791: Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests

CVE-2026-97791oss-security

12:21 Vulnerability

CVE-2026-97468: Apache CXF: Authentication bypass via weak cache keys for validated STS tokens

CVE-2026-97468oss-security

12:19 Vulnerability

CVE-2026-86463: Apache CXF: FIQL Query Parser Denial of Service

CVE-2026-86463oss-security

12:17 Vulnerability

CVE-2026-79650: Apache CXF: OIDC RP Open Redirect

CVE-2026-79650oss-security

12:15 Vulnerability

CVE-2026-78384: Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)

CVE-2026-78384oss-security

12:14 Vulnerability

CVE-2026-73179: Apache CXF: JPA authorization-code consume is non-atomic

CVE-2026-73179oss-security