Announcements

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, perform spoofing attacks, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Azure Active Directory Elevation of Privilege Vulnerability (CVE-2026-45480): CVSS: 10 Attack

Splunk has released a security update to address two vulnerabilities affecting Splunk AI Toolkit. The addressed vulnerabilities could allow the attacker to obtain sensitive information or execute arbitrary OS commands on the affected system. The addressed vulnerabilities: 1. Splunk AI Toolkit OS Command Injection in the btool Configuration Helper Vulnerability (CVE-2026-20266): CVSS: 9.1 Attack Vector:

Oracle released its critical patch updates for June 2026, containing 245 new security patches across multiple affected Oracle products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, manipulate data, or gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Oracle Coherence Centralized Takeover

Mozilla has released updated Firefox version 152 and Firefox ESR versions 115.37 and 140.12 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to conduct denial-of-service and spoofing attacks, gain elevated privilege, trigger memory corruption, obtain sensitive information, bypass security restrictions, and execute arbitrary code on the affected systems. Sample of the addressed

Fortra has released a security update to fix two vulnerabilities affecting Fortra’s Core Privileged Access Manager (BoKS). The addressed vulnerabilities could allow the attacker to gain elevated privileges or compromise a legacy tar-installed client, which may be able to cause commands to be executed on the affected system. The addressed vulnerabilities: 1. Core Privileged Access

Google has released an updated Chrome version 149.0.7827.114/.115 for Windows and Mac, and 149.0.7827.114 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected system via a crafted HTML page. Sample of the

Oracle has released a security update to fix a critical zero-day vulnerability affecting Oracle PeopleSoft Enterprise PeopleTools. The addressed vulnerability could allow the unauthenticated attacker with network access via HTTP to execute arbitrary code, leading to the compromise and a complete takeover of the affected systems. The addressed vulnerability: Oracle PeopleSoft Enterprise PeopleTools Remote Code

Splunk has released security updates to address several vulnerabilities affecting multiple Splunk products. The addressed vulnerabilities could allow the attacker to perform server-side request forgery (SSRF), conduct cross-site scripting (XSS) attacks, manipulate data, bypass security restrictions, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Splunk Enterprise

Adobe has released security updates to address several vulnerabilities affecting multiple Adobe products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate data, obtain sensitive information, perform denial-ofservice and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Adobe Experience Manager Forms

OpenSSL has released security updates to address several vulnerabilities affecting OpenSSL Software Services. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: 1. OpenSSL Heap Use-After-Free in the PKCS7_verify() Function Vulnerability

Fortinet has released security updates to address multiple vulnerabilities affecting several Fortinet products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, execute commands, or code via specially crafted HTTP requests to the affected product. Sample of the addressed vulnerabilities: 1. Second-Order OS Command Injection Vulnerability (CVE-2026-25089): CVSS: 9.1 Attack Vector: Network Attack

Ivanti has released a security update to fix several vulnerabilities affecting multiple versions of Ivanti Endpoint Manager Mobile (EPMM) and Ivanti Sentry. The addressed vulnerabilities could allow the attacker to bypass security restrictions, execute arbitrary code, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Ivanti Sentry Command Injection Vulnerability (CVE-2026-10520):

Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed 206 flaws, including 3 publicly disclosed zero-day vulnerabilities. Microsoft has addressed multiple vulnerabilities in this release that could allow attackers to gain elevated privileges, perform spoofing and denial-of-service attacks, bypass security restrictions, obtain sensitive information, or execute arbitrary

Veeam has released a security update to fix a vulnerability in Veeam Backup & Replication 12.3.2.4465 and all earlier versions 12 builds. The addressed vulnerability could allow the authenticated domain user to execute arbitrary code on the Backup Server. The addressed vulnerability: Veeam Backup & Replication Remote Code Execution Vulnerability (CVE-2026- 44963): CVSS 4.0: 9.4

SAP has released security updates to address several vulnerabilities affecting multiple SAP products. SAP has released a patch that fixes several vulnerabilities affecting multiple SAP products, including SAP NetWeaver AS ABAP, SAP Commerce Cloud, SAP Data Hub, SAP NetWeaver Application Server Java (Web Container), ODP Data Replication APIs, SAP S/4HANA, SAP NetWeaver AS Java (JDBC

Check Point has released security updates to fix several vulnerabilities across multiple Check Point products. The addressed vulnerabilities could allow the attacker to perform denial-of-service or man-in-the-middle attacks, manipulate data, or bypass authentication and gain unauthorized access to the affected systems. Sample of the addressed vulnerabilities: 1. Check Point VPN Remote Access and Mobile Access

Apache has released a security update to address several vulnerabilities affecting Apache HTTP Server versions 2.4.67 and earlier, fixed in version 2.4.68. The addressed vulnerabilities could allow the attacker to manipulate data, perform denial-of-service attacks and cross-site scripting attacks, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected system. Sample of

Google has released an updated Chrome version 149.0.7827.102/.103 for Windows and Mac, and 149.0.7827.102 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, memory corruption, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Use-After-Free in Gamepad Vulnerability

Progress Software Corporation has released security updates to fix several vulnerabilities across multiple Progress products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, modify account properties of other users, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: 1. Progress Sitefinity Insufficiently Protected Credentials in Web Services Vulnerability

Google has released an updated Chrome version 149.0.7827.53/54 for Windows and Mac, and 149.0.7827.53 for Linux. The addressed vulnerabilities could allow the attacker to perform spoofing and denial-of-service attacks, memory corruption, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected system via a crafted HTML page. Sample of the addressed vulnerabilities: