Alerts

Ivanti has released a security update to fix a vulnerability affecting Ivanti Secure Access Client (Windows) versions 22.8R5 and prior. The addressed vulnerability could allow the remote unauthenticated attacker to execute arbitrary code on the affected products. The addressed vulnerability: Ivanti Secure Access Client Improper Certificate Validation Vulnerability (CVE- 2026-8992): CVSS: 8.8 Attack Vector: Network

Google has released an updated Chrome version 148.0.7778.178/179 for Windows and Mac, and 148.0.7778.178 for Linux. The addressed vulnerabilities could allow the attacker to perform denial of service and spoofing attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities:

F5 has released a security update to address a vulnerability affecting F5 NGINX ngx_http_rewrite_module. The addressed vulnerability could allow the remote attacker to perform denial of service (DoS) attacks on the NGINX system, or to possibly trigger code execution. The addressed vulnerability: NGINX ngx_http_rewrite_module Heap Buffer Overflow Vulnerability (CVE-2026-9256): CVSS: 8.1 Attack Vector: Network Attack

Splunk has released security updates to fix several vulnerabilities across Splunk AI Toolkit, Splunk Enterprise, and Splunk Cloud Platform. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information or perform denial-of-service attacks on the affected systems. Sample of the addressed vulnerabilities: 1. Splunk Enterprise and Splunk Cloud Platform Sensitive Information Disclosure Vulnerability

F5 has released a security update to address a vulnerability across F5 NGINX JavaScript (njs). The addressed vulnerability could allow the remote attacker to perform denial of service (DoS) attacks on the NGINX system, or to possibly trigger code execution. The addressed vulnerability: NGINX ngx_Http_Js_Module Denial of Service Vulnerability (CVE-2026-8711): CVSS: 8.1 Attack Vector: Network

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, bypass security restrictions, execute arbitrary code, or gain elevated privileges on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Defender Remote Code Execution Vulnerability (CVE-2026-45584): CVSS: 8.1 Attack Vector:

Linux has released security updates to address several vulnerabilities in Linux Kernel. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, obtain sensitive information, or gain elevated privileges on the affected system. Sample of the addressed vulnerabilities: 1. Linux Kernel Local Privilege Escalation Vulnerability (CVE-2026-46300): CVSS: 7.8 Attack Vector: Local Attack

Grafana has released security updates to fix several vulnerabilities across multiple Grafana products. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, obtain sensitive information, gain elevated privileges, manipulate files, or bypass security restrictions on the affected systems. Sample of the addressed vulnerabilities: 1. Grafana Auth Proxy IPv6 Whitelist Bypass Vulnerability (CVE-2026-33376): CVSS:

Apple has released security updates to address multiple vulnerabilities across macOS Tahoe, macOS Sequoia, macOS Sonoma, and Safari. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice attacks, gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code and gain access to affected systems. Sample of the addressed vulnerabilities: 1. Apple

Palo Alto has released security updates to address several vulnerabilities affecting multiple Palo Alto products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service and man-in-the middle attacks, bypass security restrictions, obtain sensitive information, manipulate data, gain elevated privileges, perform stored cross-site scripting, execute arbitrary code/commands, and gain access to the affected systems. Sample

HPE Aruba has released security updates to fix several vulnerabilities affecting multiple HPE Aruba products. The addressed vulnerabilities could allow the remote attacker to perform SQL injection, conduct denial of service attacks, manipulate data, obtain sensitive information, gain elevated privileges, or execute arbitrary code and gain access to the affected product. Sample of the addressed