Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in cross-site scripting, se…
An update that solves eight vulnerabilities, contains two features and has three security fixes can now be installed.
An update that solves 44 vulnerabilities, contains two features and has five security fixes can now be installed.
An update that fixes 8 vulnerabilities is now available.
It was discovered that there was a potential buffer overflow in xz-utils, a popular data-compression utility and library. CVE-2026-34743 If the lzma_index_deco…
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) …
An update that solves nine vulnerabilities and contains one feature can now be installed.
A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no explo…
Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archi…
An update that fixes 7 vulnerabilities is now available.
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted H…
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-…
An update that fixes one vulnerability is now available.
This update contains a fix for CVE-2026-13503.
This update contains a fix for CVE-2026-13503.
Ruby 3.4.10 is released. This new version contains severay security bug fixes in zlib, net-imap and erb..
New netatalk packages are available for Slackware 15.0 and -current to fix security issues. Please note that for slackware-15.0 the new iniparser package in pa…
1.033 - CVE-2026-14454: Fix mishandling of large EXIF IFD entry count values — treated as negative numbers, could lead to allocation failure and program exit -…
1.033 - CVE-2026-14454: Fix mishandling of large EXIF IFD entry count values — treated as negative numbers, could lead to allocation failure and program exit -…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…
An update that fixes one vulnerability is now available.
An update that fixes 13 vulnerabilities is now available.
If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability—CVE-2026-20896—sh…
An update that fixes one vulnerability is now available.
