Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

PHP — CVE-2026-109618 · CVE-2026-109619

Vulnerability High

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

On 21 October 2026, the PHP project shipped emergency releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619, two memory flaws that let an unauthent…

PHPApacheNginx

OVHcloud CLI — v0.11.0 → v0.15.0

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

On 19 October 2026, a compromised OVHcloud developer account was used to replace the GitHub release files of ovhcloud-cli v0.11.0 to v0.15.0 with a trojanised build that steals SS…

OVHSupply chainCloud

BeyondTrust — CVE-2026-102764

Vulnerability Critical

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

BeyondTrust has fixed CVE-2026-102764, a critical flaw in Remote Support that lets an attacker with no account perform file operations on the appliance. According to Google and Ma…

BeyondTrustRemote accessLinux

Nextcloud · Collabora CODE — CVE-2026-110447

Vulnerability Critical

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

A critical flaw in the optional Nextcloud app Collabora Online - Built-in CODE Server lets anyone run system commands on the server without logging in. It has been exploited since…

NextcloudLinuxPHP

Integrity Tech · AA26-281A — 8 CVE

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

On 8 October 2026 the FBI, CISA, NSA and agencies from six other countries published a joint advisory on the hackers enabled by Integrity Technology Group, a Chinese company linke…

ExchangeMicrosoft 365Linux

Atlassian Data Center — CVE-2026-21589

Vulnerability High

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Atlassian disclosed on 5 October 2026 CVE-2026-21589 (CVSS 9.3), a path traversal flaw in eight self-hosted products, including Jira, Confluence and Bitbucket Data Center. No logi…

AtlassianJiraConfluence

Apache httpd — 2.4.69 · 2026-10-01

Advisory Medium

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Apache released httpd 2.4.69 on 1 October 2026 with 20 vulnerability fixes, rated low (15) or moderate (5). No emergency, but every Apache server should be updated in the next mai…

ApacheLinux

Citrix NetScaler — CVE-2026-88771 · 88772 · 88779

Vulnerability Critical

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Two pre-authentication flaws in NetScaler ADC and Gateway (CVE-2026-88771 and CVE-2026-88772, CVSS 9.5) were exploited before any fix existed and are now used by many attacker gro…

CitrixVPN

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 16.0 Important Perl-XS-Parse-Keyword Fix CVE-2026-85644

An update that solves one vulnerability and has one bug fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE python-virtualenv Key Injection Configuration Issues 2026-22100-1

An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 16.0 Mutt Important Heap Overflow Fix CVE-2026-107570

An update that solves one vulnerability and has one bug fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Go1.26 Important Security Fixes Advisory 2026-22095-1

An update that solves 13 vulnerabilities and has 14 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE go1.27 Important Fixes for Multiple Vulnerabilities 2026-22093-1

An update that solves 15 vulnerabilities and has 16 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

OpenSUSE Leap 16.0 Kernel Important Bug Fix Advisory 2026-22091-1

An update that solves 401 vulnerabilities and has 413 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE iperf Important Remote Denial Memory Exhaustion CVE-2026-22090-1

An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

openSUSE podman Important Environment Leak and Symlink Flaw 2026-22089-1

An update that solves 2 vulnerabilities and has 3 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE stunnel Moderate Oversized Log Issue CVE-2026-70367 CVE-2026-70368

An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Xwayland Critical Buffer Overflow Use After Free Flaw 2026-22085-1

An update that solves 12 vulnerabilities and has 12 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

OpenSUSE libpng16 Moderate Use-After-Free Issues CVE-2026-46675

An update that solves one vulnerability and has one bug fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 16.0 GCC 13 Important Buffer Overflow Advisory 2026-22083-1

An update that solves one vulnerability and has 2 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 16.0 unbound Important Heap Overflow Risks Update 2026-22082-1

An update that solves 9 vulnerabilities and has 9 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Squid Important Denial of Service Issues Vuln 2026-22080-1

An update that solves 5 vulnerabilities and has 6 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 16.0 Virtiofsd Important Time Parser Fix CVE-2026-25727

An update that solves one vulnerability and has 2 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Google Osconfig Agent Important Crash Vulnerability 2026-22078-1

An update that solves one vulnerability and has one bug fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Fetchmail Important Buffer Overflow CVE-2026-94184 2026-22077-1

An update that solves one vulnerability and has one bug fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE webkit2gtk3 Critical Security Update Advisory 2026-22076-1

An update that solves 243 vulnerabilities and has 15 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Agama Important Network Access Advisory 2026-22075-1

An update that solves 2 vulnerabilities and has 6 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE python-PyJWT Important Security Issues Fixed 2026-22074-1

An update that solves 10 vulnerabilities and has 10 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 2026-22073-1 python-jwcrypto Important Denial of Service

An update that solves one vulnerability and has one bug fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

openSUSE Leap 16.0 openvpn Major Remote Access Memory Leak CVE-2026-22072-1

An update that solves 9 vulnerabilities and has 9 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE python-urllib3 Important DoS Vulnerability Fixes 2026-22071-1

An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE python-hpack Moderate Runtime Issue Fix Advisory 2026-22070-1

An update that solves one vulnerability and has one bug fix can now be installed.