Warning Against Vulnerabilities Exploited in Actual Attacks (Collabora Online – Built-in CODE Server)
Overview The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Users Collabora Online – Built-in CODE Server users. Vulnerability Information CVE-2026-110447. Classified as an OS command injection vulnerability. The announcement states that this vulnerability is currently being exploited in
Warning Against Vulnerabilities Exploited in Actual Attacks (Google Brotli)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The list includes CVE-2026-111497, which affects Google Brotli. The vulnerability is a return value validation failure. CISA has advised users of this product to update to the latest version. Recommended actions
Warning Against Vulnerabilities Exploited in Actual Attacks (PHP)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The affected product is PHP. CVE-2026-109618 is a memory corruption vulnerability that occurs under memory-starved conditions. CVE-2026-109619 is a vulnerability involving a reference to an outdated internal request state. CISA has
Warning Against Vulnerabilities Exploited in Actual Attacks (Adobe Commerce and Magento)
Overview The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Products and Vulnerabilities CVE-2026-48356. The affected products are Adobe Commerce and Magento. The vulnerability involves unrestricted uploading of dangerous file types. Recommendations Product users should apply mitigations in accordance
