Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Oracle Linux 9 has updated RPMs addressing security vulnerabilities related to LDAP filter injections, NULL pointer dereferences, and stack buffer overflows in…
SUSE announced a moderate security update for texlive addressing three vulnerabilities, including NULL pointer dereferences and a use-after-free issue, applica…
An update for the libgsasl library in Fedora 44 addresses CVE-2026-48829, which involved a denial of service vulnerability through a NULL pointer dereference i…
Fedora has released an update for libgsasl to fix CVE-2026-48829, addressing a denial of service vulnerability related to NULL pointer dereference in the DIGES…
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.The vulnerability, tracked as CVE-2026-58231, …
A step-by-step method for finding and proving CORS misconfiguration vulnerabilities: the header checks, the edge cases developers miss, and how to fix them.How…
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.…
Oracle Linux has released kernel updates addressing several vulnerabilities, including CVEs for KVM checks and network attribute handling, available for x86_64…
Oracle Linux has released security updates for version 10, addressing CVE-2026-5056 related to integer overflow and bounds check vulnerabilities in uncompresse…
Mageia updates address multiple security vulnerabilities across releases 10 and 9, including heap out-of-bounds reads and NULL pointer dereferences affecting l…
The Fedora 43 update for lemonldap-ng (version 2.23.2) enhances Web Single Sign On and fixes the CVE-2026-12804 vulnerability regarding an Open Redirect in SAM…
SUSE has released an important security update for liboqs and oqs-provider, addressing multiple vulnerabilities, including issues in signature verification and…
A security update for the kernel-rt on Rocky Linux 8 addresses vulnerabilities, including potential I/O checks and memory issues, requiring attention to ensure…
A practical checklist for the Azure DevOps MCP flaw that lets hidden PR comments hijack AI coding agents, plus the configuration changes to make right now.Azur…
Fedora 44's perl-YAML-Syck update addresses four memory-safety vulnerabilities, enhances security checks, and includes various bug fixes for better performance…
It was discovered that there was a origin-validation error in rtpengine, an open-source media proxy for real-time audio and video traffic. CVE-2025-53399 The e…
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) …
Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix, which might result in bypass of access checks, overwr…
Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published.The vulnerabilities are listed b…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…
If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability—CVE-2026-20896—sh…
Version 0.17.0 - 2026-07-01 Security Fix size_t overflow in amqp_decode_bytes bounds check leading to out-of-bounds read (GHSA-jgjf-7fwf-f3c7, #888) Fix heap b…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…
Version 0.17.0 - 2026-07-01 Security Fix size_t overflow in amqp_decode_bytes bounds check leading to out-of-bounds read (GHSA-jgjf-7fwf-f3c7, #888) Fix heap b…
