Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fedora has released an update for lemonldap-ng to version 2.23.3, fixing CVE-2026-19349, enhancing web SSO and access management functionality.
Fedora 43 has updated lemonldap-ng to version 2.23.3, addressing CVE-2026-19349, enhancing its Web Single Sign On and Access Management features for improved s…
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software b…
Multiple vulnerabilities in the Caddy web server can lead to unauthorized access and other security issues; users are urged to upgrade to version 2.6.2-12+deb1…
The Fedora 43 update for python-wsgidav version 4.3.5 fixes security issues CVE-2026-55509 and CVE-2026-55560, enhancing its WebDAV server capabilities.
Fedora 44 has released an update for python-wsgidav version 4.3.5, addressing security vulnerabilities CVE-2026-55509 and CVE-2026-55560, enhancing its WebDAV …
Mageia has released security updates for versions 10 and 9, addressing multiple vulnerabilities including XSS attacks, authentication bypass, and incomplete we…
Fedora has updated Perl to version 5.42.3, addressing a heap buffer overflow and information disclosure vulnerabilities, enhancing system administration and we…
A security update for python-urwid addresses a vulnerability where web session IDs are not cryptographically secure, affecting several SUSE Linux products, rel…
The Fedora 43 update for lemonldap-ng (version 2.23.2) enhances Web Single Sign On and fixes the CVE-2026-12804 vulnerability regarding an Open Redirect in SAM…
Fedora 44 has updated Lemonldap-ng to version 2.23.2, addressing CVE-2026-12804, which involves an open redirect vulnerability, enhancing security for its web …
Fedora has released PHP version 8.5.9, addressing various bugs, security issues, and improving functionality across multiple components, ensuring better stabil…
The Fedora update for nginx-mod-naxsi includes a rebuild for version 1.30.4 and addresses multiple CVEs, enhancing security and functionality for the web appli…
A security update for libsoup resolves two vulnerabilities in SUSE Linux Micro 6.0, including an incomplete fix for an out-of-bounds read issue in WebSocket co…
Mageia 10 users are advised to update to Transmission 4.1.3 to address a clickjacking vulnerability in the WebUI and RPC response paths, identified as CVE-2026…
Multiple vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in cross-site scripting, se…
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-…
Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published.The vulnerabilities are listed b…
A vulnerability has been found in the mesa 3D graphics library, possibly allowing out of bound memory access by craftet input. CVE-2026-40393 An out-of-bounds …
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code e…
Linux security teams are drowning. Patches, kernel updates, new CVEs every week. SSH exposed here, an old web service there, and a forgotten cron job running a…
Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and use i…
A flaw was found in Sympa’s web interface, a modern mailing list manager. An attacker may bypass authentication by using an arbitrary e-mail address when the g…
Multiple vulnerabilities were discoverd in Nginx, a high-performance web and reverse proxy server, which could result in remote code execution, denial of servi…
