Nginx disclosed buffer overflow CVE-2026-15176 when alias is used with rewrite. Versions 0.1.29–1.31.6 are affected; check the running version and upgrade to 1.31.7+ or 1.30.6+.
Select a severity level below to filter articles
18 topic assignments; an article may belong to multiple groups.
Rucio is affected by CVE-2026-100397, which lets unauthenticated attackers obtain an SSH challenge token for an administrator account and access APIs with that account’s privileges for 10 seconds. Check installed versions and upgrade to the corresponding fix.
Debian DSA-6625-1 updates postgresql-17 on Debian trixie to address multiple vulnerabilities, including CVE-2026-6460. Reported risks include arbitrary code execution, authentication bypass, information disclosure, denial of service, and privilege escalation. Upgrade to 17.12-0+deb13u1 and…
Microsoft disclosed CVE-2026-111497, an out-of-bounds write in the Brotli decoder used by .NET that could enable elevation of privilege over a network. Exposure requires an application to use Brotli decompression; check affected products and versions, then install the applicable update.
Cisco says a 2025 key-generation flaw left private keys for eight eMudhra intermediate CA certificates weak enough to brute-force in seconds. Review affected Cisco products and apply the corresponding distrust guidance or update.
Unit 42 says CL-STA-1238 used the Cairn AI framework with Zhipu GLM and DeepSeek in 25 campaigns targeting at least 19 organizations. Ten organizations experienced unauthorized access or data theft; relevant organizations should review accounts, credentials, and signs of lateral movement.
Qilin is a ransomware-as-a-service operation active since September 2022, using affiliates to breach organizations and deploy ransomware. It steals data before encrypting systems and threatens disclosure; organizations should review their ability to detect intrusions, data theft, and…
Palo Alto Networks warns that CVE-2026-0325 in the PAN-OS GlobalProtect gateway lets users with valid credentials bypass IP address limits and source-IP-based access controls. Check gateway configuration and upgrade affected branches to their corresponding fixed versions.
ZDI warns that untrusted-data deserialization in Meta FAIRChem’s utils load_inference_model could allow code execution in the current process if a user opens a malicious file or visits a malicious page. ZDI recommends limiting interaction with the product.
Node.js has released security updates for the 22.x, 24.x, and 26.x lines, fixing HTTP/2, HTTPS, and TLS flaws that may disrupt servers, expose memory or data, or bypass certificate authentication. Check your version and upgrade to the corresponding security release.
Ubuntu USN-9091-1 warns of multiple vulnerabilities in the Linux kernel for NVIDIA Tegra. The supplied record gives no affected branches or fixed packages. Check installed kernels and packages, then consult the Ubuntu notice for the applicable update.
Cisco says a 2025 key-generation flaw left private keys for eight eMudhra intermediate CA certificates weak enough to brute-force in seconds. Review affected Cisco products and apply the corresponding distrust guidance or update.
Unit 42 says CL-STA-1238 used the Cairn AI framework with Zhipu GLM and DeepSeek in 25 campaigns targeting at least 19 organizations. Ten organizations experienced unauthorized access or data theft; relevant organizations should review accounts, credentials, and signs of lateral movement.
Copyright © 2026 ViSafe (visafe.net) · A blog sharing cybersecurity knowledge
