Read this article
Tag: Vulnerability
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work…
71% of vulnerability exploitation starts within a week of disclosure
Attackers are exploiting newly disclosed security flaws within days, leaving organizations little time to respond, according to Rapid7’s Q3 2026 Quarterly…
CVE-2026-84942 – Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
Read this article
Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds
Palo Alto Networks has confirmed that a critical Brotli vulnerability affects some PAN-OS firewall deployments and its Prisma Cloud Application Security…
CVE-2026-85788 – Issue with awslabs mysql-mcp-server
Read this article
CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server
Read this article
CVE-2026-85787 – An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
Read this article
Inside Node2Shell: A Closer Look at CVE-2026-111497
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Inside Node2Shell: A Closer Look at CVE-2026-111497
CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder
Overview On October 21, 2026, the Node.js Project published a security advisory for CVE-2026-111497 , an out-of-bounds write in the Brotli decoder bundled…
PHP Releases New Windows Build Security Updates to Fix Critical HTTP2Shell Vulnerability
The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and…
CVE-2026-115418 – SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)
Bulletin ID: 2026-151-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/26/2026 09:30 AM PDT Description: The AWS Cloud…
Critical ‘HTTP2Shell’ Brotli vulnerability triggers emergency patches
A critical flaw dubbed ‘HTTP2Shell’ in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive…
Microsoft Releases Out-of-Band Security Updates for Brotli and .NET tarballs Vulnerability
Microsoft has released out-of-band security updates for .NET to fix a Brotli buffer overflow and unsafe ownership settings in Linux distribution archives.…
Cloudflare Release Emergency WAF Ruleset Update Following Brotli Vulnerability
Cloudflare has announced an emergency Web Application Firewall (WAF) ruleset update linked to CVE-2026-111497, a Brotli vulnerability. The October 25,…
PHP RCE Flaw CVE-2026-115560 Mitigation Guidance
PHP maintainers have disclosed CVE-2026-115560, a remote code execution vulnerability that affects a limited subset of PHP installations due to specific…
OpenBSD 8.0 Released With Enhanced Firewall Security and Critical Vulnerability Fixes
OpenBSD 8.0 was released on October 20, 2026, marking the project’s 61st release. This update includes significant improvements, including enhanced…
Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database
Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry
HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow
The HTTP2Shell vulnerability reaches beyond web traffic, with new research showing how the same Brotli decoder flaw (CVE-2026-111497) can disrupt .NET…
Cloudflare Adds New WAF Rules to Detect Attacks Targeting CVE-2026-111497
Cloudflare announced an emergency release of its Web Application Firewall (WAF) on October 25, 2026. This update introduces two detection rules for the…