Alerts

Drupal has released security updates to address several vulnerabilities affecting multiple Drupal products. The addressed vulnerabilities could allow the attacker to perform cross-site scripting (XSS), path traversal, and SQL injection attacks, gain elevated privileges, bypass security restrictions, obtain sensitive information, or execute arbitrary code on the affected system, potentially leading to full compromise. Sample of

Tenable has released security updates to address several vulnerabilities across Nessus, Nessus Agent, and Tenable Identity Exposure. The addressed vulnerabilities could allow the attacker to perform SQL injection attacks, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of addressed vulnerabilities: 1. Tenable Nessus Agent Path Traversal Vulnerability (CVE-2026-15265): CVSS: 9.1 Attack

VMware has released security updates to fix several vulnerabilities affecting VMware Avi Load Balancer. The addressed vulnerabilities could allow the attacker to perform directory traversal attacks, bypass security restrictions, gain elevated privileges, or inject and execute arbitrary code on the affected products. Sample of the addressed vulnerabilities: 1. VMware Avi Load Balancer Authentication Bypass Vulnerability

Google has released an updated Chrome version 150.0.7871.124/.125 for Windows and Mac and 150.0.7871.124 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, trigger memory corruption, bypass security restrictions, obtainsensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Use-After-Free in Core

Adobe has released security updates to address several vulnerabilities affecting multiple Adobe products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, trigger memory corruption, perform server-side request forgery (SSRF), bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary commands, potentially leading to gaining access to the affected product.

Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed 570 flaws, including 3 publicly disclosed zero-day vulnerabilities. Microsoft has addressed multiple vulnerabilities that could allow attackers to gain elevated privileges, perform spoofing and denial-of-service attacks, bypass security restrictions, obtain sensitive information, or execute arbitrary code and gain

SonicWall has released security updates to fix several vulnerabilities affecting SonicWall SMA1000 Series Appliances. The addressed vulnerabilities could allow the remote attacker to perform a serverside request forgery (SSRF) attack or execute arbitrary operating system (OS) commands, potentially leading to the complete compromise of the affected system. The addressed vulnerabilities: 1. SonicWall SMA1000 Server-Side Request

Apache Tomcat has released a security update to address two vulnerabilities affecting multiple versions of Apache Tomcat. The addressed vulnerabilities could allow the attacker to obtain sensitive information or bypass security restrictions on the affected system. The addressed vulnerabilities: 1. Apache Tomcat Improper Handling of URL Encoding Vulnerability (CVE-2026- 59083): CVSS: 9.1 Attack Vector: Network

Google has released an updated Chrome version 150.0.7871.114/.115 for Windows and Mac and 150.0.7871.114 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, bypass security restrictions, inject arbitrary scripts, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Use After Free

IBM has released security updates to address several vulnerabilities affecting multiple IBM products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, obtain sensitive information, perform server-side request forgery and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems. Sample of addressed vulnerabilities:

BeyondTrust has released security updates to address vulnerabilities affecting Remote Support (RS), Privileged Remote Access (PRA), and Privilege Management for Windows. The addressed vulnerabilities could allow the attacker to bypass security restrictions, conduct denial of service attacks, or execute arbitrary code and gain access to the affected product. Sample of the addressed vulnerabilities: 1. BeyondTrust