Linux Kernel Security Update Advisory (CVE-2026-46300)
Overview A security update has been released to address an out-of-bounds write vulnerability (CVE-2026-46300) in the Linux kernel. Affected Parties This applies to the following Linux kernel versions: – 3.9 or higher, but less than 5.10.257. – 5.11 Or higher, but less than 5.15.208. – 5.16 Or higher, but less
Cisco Product Security Update Advisory
Overview A security update addressing vulnerabilities in Cisco products has been released. Users of these products should update to the latest version. Affected Products Cisco Expressway Series. Versions X14 and earlier, X15.5.3 and earlier. – Cisco Emergency Responder. Versions 14 and 15. – Cisco Prime Collaboration Deployment. Versions 14 and
Adobe Product Security Update Advisory
Adobe has released security updates to address vulnerabilities in Adobe products. – The affected products are Adobe Commerce, Adobe Commerce B2B, Magento Open Source, Adobe Commerce Events, and Adobe Connect. CVE-2026-48356 is a privilege escalation vulnerability in Adobe Commerce, Adobe Commerce B2B, Magento Open Source, and Adobe Commerce Events caused
Warning Against Vulnerabilities Exploited in Actual Attacks (Collabora Online – Built-in CODE Server)
Overview The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Users Collabora Online – Built-in CODE Server users. Vulnerability Information CVE-2026-110447. Classified as an OS command injection vulnerability. The announcement states that this vulnerability is currently being exploited in
Warning Against Vulnerabilities Exploited in Actual Attacks (Google Brotli)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The list includes CVE-2026-111497, which affects Google Brotli. The vulnerability is a return value validation failure. CISA has advised users of this product to update to the latest version. Recommended actions
Warning Against Vulnerabilities Exploited in Actual Attacks (PHP)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The affected product is PHP. CVE-2026-109618 is a memory corruption vulnerability that occurs under memory-starved conditions. CVE-2026-109619 is a vulnerability involving a reference to an outdated internal request state. CISA has
Warning Against Vulnerabilities Exploited in Actual Attacks (Adobe Commerce and Magento)
Overview The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Products and Vulnerabilities CVE-2026-48356. The affected products are Adobe Commerce and Magento. The vulnerability involves unrestricted uploading of dangerous file types. Recommendations Product users should apply mitigations in accordance
Collabora Product Security Update Advisory (CVE-2026-110447)
Overview A security update has been released to address a vulnerability in Collabora products. The affected product is Collabora Online - Built-in CODE Server, and versions prior to 26.4.303 Are vulnerable. Vulnerability Details A vulnerability, CVE-2026-110447, classified as an OS command injection vulnerability, was discovered in proxy.Php. This vulnerability has
Oracle Product Security Update Advisory (CVE-2026-91403)
A security update has been released to address vulnerabilities in Oracle products. The affected products are Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and Oracle Java SE. The vulnerability has been identified as CVE-2026-91403. This vulnerability involves a certificate validation bypass in Oracle Java SE and GraalVM caused by
Laravel Security Update Advisory (CVE-2026-114509)
A security update has been released to address a vulnerability in the Laravel product. The vulnerability, identified as CVE-2026-114509, is an authentication bypass vulnerability caused by improper authentication handling in Laravel TokenGuard (a token-based API access control feature). Affected Versions include Laravel framework versions prior to v12.68.0 And prior to
