Alerts

VMware has released a security update to fix several vulnerabilities in multiple VMware products. The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks, create policies, views, or text widgets, and perform administrative actions on the affected products. Sample of the addressed vulnerabilities: VMware Cloud Foundation Operations Stored Cross-Site Scripting Vulnerability (CVE-2026-41722): CVSS:

SolarWinds has released a security update to address a vulnerability affecting SolarWinds Serv-U 15.5.4 and all prior versions. The addressed vulnerability could allow the attacker to conduct denial-of-service attacks on the affected system via specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. The addressed vulnerability: SolarWinds Serv-U Unauthenticated Denial-of-Service

Cisco has released a security update to address one vulnerability affecting Cisco Catalyst SD-WAN Manager. The addressed vulnerability could allow the local attacker to escalate privileges to root by uploading a crafted file that exploits insufficient validation of user‑supplied input, enabling arbitrary command execution on the affected systems. The addressed vulnerability: Cisco Catalyst SD-WAN Manager

SolarWinds has released a security update to address a vulnerability affecting SolarWinds Web Help Desk 2026.1 and all previous versions. The addressed vulnerability could allow the attacker to conduct denial-of-service attacks and cause crashes of the web help desk server due to insufficient memory. The addressed vulnerability: SolarWinds Web Help Desk Denial-of-Service Vulnerability (CVE-2026-28299): CVSS:

Mozilla has released an updated Firefox version 151.0.3 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, and execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: Mozilla Firefox Incorrect Boundary Conditions in the Graphics: Text Component Vulnerability (CVE-2026-10701): CVSS: 7.5 Attack Vector:

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, perform server-side request forgery (SSRF) and cross-site scripting (XSS) attacks, escalate privileges, or execute arbitrary code and gain access to the affected systems. Sample of addressed vulnerabilities: 1. Cisco Unified Communications

Ivanti has released a security update to fix a vulnerability affecting Ivanti Neurons for ITSM versions 2025.4 and prior (On-Premises), versions 2026.1 and prior (Cloud). The addressed vulnerability could allow the remote authenticated attacker to gain elevated privileges on the affected system. The addressed vulnerability: Ivanti Neurons for ITSM (Cloud and On-Premises) Improper Access Control

Trend Micro has released security updates to address several vulnerabilities affecting Apex One, Apex One as a Service (SaaS), and TrendAI Vision One Endpoint Security – Standard Endpoint Protection (SEP). The addressed vulnerabilities could allow the attacker to modify a key table on the server to inject malicious code or gain elevated privileges to the

Ivanti has released a security update to fix a vulnerability affecting Ivanti Secure Access Client (Windows) versions 22.8R5 and prior. The addressed vulnerability could allow the remote unauthenticated attacker to execute arbitrary code on the affected products. The addressed vulnerability: Ivanti Secure Access Client Improper Certificate Validation Vulnerability (CVE- 2026-8992): CVSS: 8.8 Attack Vector: Network

Google has released an updated Chrome version 148.0.7778.178/179 for Windows and Mac, and 148.0.7778.178 for Linux. The addressed vulnerabilities could allow the attacker to perform denial of service and spoofing attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities:

F5 has released a security update to address a vulnerability affecting F5 NGINX ngx_http_rewrite_module. The addressed vulnerability could allow the remote attacker to perform denial of service (DoS) attacks on the NGINX system, or to possibly trigger code execution. The addressed vulnerability: NGINX ngx_http_rewrite_module Heap Buffer Overflow Vulnerability (CVE-2026-9256): CVSS: 8.1 Attack Vector: Network Attack

Splunk has released security updates to fix several vulnerabilities across Splunk AI Toolkit, Splunk Enterprise, and Splunk Cloud Platform. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information or perform denial-of-service attacks on the affected systems. Sample of the addressed vulnerabilities: 1. Splunk Enterprise and Splunk Cloud Platform Sensitive Information Disclosure Vulnerability