We’re attending MSP Global at Port Aventura!
Search
125 results for “soverity”
-
Max-severity GitLab bug allows remote code execution over 12 years of releases https://www.theregister.com/security/2026/10/22/max-severity-gitlab-bug-allows-remote-code-execution-over-12-years-of-releases/5304854
-
High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 https://www.securityweek.com/high-severity-flaws-exploited-in-three-days-as-ransomware-dominates-q3-rapid7/
-
High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
Rapid7’s Q3 analysis finds high-severity flaws were exploited within three days on average, while AI appeared in just 8% of tracked incidents, SecurityWeek reports. Ransomware dominated the quarter’s activity. https://www.securityweek.com/high-severity-flaws-exploited-in-three-days-as-ransomware-dominates-q3-rapid7/
-
HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise has released security updates patching 72 vulnerabilities in ArubaOS, the operating system for its Aruba networking equipment, BleepingComputer reports. Eight of the flaws are maximum-severity issues that could let an attacker bypass authentication or execute code remotely. https://www.bleepingcomputer.com/news/security/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/
-
⚠️ The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-99081) https://vuldb.com/vuln/425929
-
You can tell the severity of a global security issue by the amount of clients and various other people in their organisations contacting you unexpectedly to check if there's any impact.
PHP2Shell is definitely a record breaker!
...and nobody contacted us about eMudhra 😢
-
⚠️ The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-99079) https://vuldb.com/vuln/425909
-
⚠️ The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-98889) https://vuldb.com/vuln/425724
-
🚨 High-severity security fix in body-parser 2.4.0 and 1.20.9 just released!
Patches CVE-2026-111181: body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828
-
🚨 High-severity security fix in [email protected] just released!
Patches CVE-2026-113872: multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown
https://github.com/expressjs/multer/security/advisories/GHSA-q7qp-rjg7-q26m
-
GitLab Patches Max-Severity Flaw Exploited in Code Execution Attacks
GitLab has patched a critical flaw that allowed hackers to execute malicious code on its servers, thanks to an integer overflow vulnerability in its Regular Expression Compiler that could be triggered by a specially crafted regular expression. This max-severity vulnerability, tracked as CVE-2026-110264, could be…
#Gitlab #CodeExecution #Cve2026110264 #RemoteCodeExecution #RegularExpressionCompiler
-
⚠️ The severity is increased for this new vulnerability affecting Google Chrome (CVE-2026-113051) https://vuldb.com/vuln/424194
-
⚠️ The severity is increased for this new vulnerability affecting Google Chrome (CVE-2026-113344) https://vuldb.com/vuln/424674
-
Rapid7 reports high-severity vulnerabilities were exploited within three days on average in Q3 2026, with 71% exploited in the first week. The window between disclosure and exploitation continues to compress, requiring faster prioritization and patching. #VulnerabilityManagement #ThreatIntelligence #PatchManagement
https://cyberworldops.eu/en/attackers-exploited-high-severity-flaws-within-three-days-on-average
-
SafePay ransomware (HIGH severity) has compromised 600+ critical infrastructure orgs since 2024. Uses double-extortion, deletes backups, exploits VPNs & edge devices. Prioritize MFA, patching, & privilege restrictions. Details: https://radar.offseq.com/threat/cisa-safepay-ransomware-hit-over-600-critical-infrastructure-orgs-f0ecfff7537ad306 #OffSeq #ransomware #cybersecurity
-
⚠️ The severity is increased for this new vulnerability affecting Google Chrome (CVE-2026-113080) https://vuldb.com/vuln/424219
-
⚠️ A new vulnerability with increased severity was disclosed for Microsoft Exchange Server (CVE-2026-96185) https://vuldb.com/vuln/425517
-
GitLab Warns of New Max Severity Code Execution Vulnerability https://packetstorm.news/news/view/46185 #news
-
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. https://www.securityweek.com/high-severity-flaws-exploited-in-three-days-as-ransomware-dominates-q3-rapid7/
-
⚠️ A new vulnerability with increased severity was disclosed for ISC BIND 9 (CVE-2026-94300) https://vuldb.com/vuln/424802
-
⚠️ A new vulnerability with increased severity was disclosed for Google Chrome (CVE-2026-113343) https://vuldb.com/vuln/424672
-
PHP Rushes Emergency Patches for High-Severity Vulnerabilities
The PHP project has rushed out an emergency release to fix two critical remote-code-execution flaws, with early attacks already emerging, prompting an urgent call to update to patched versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. This swift action aims to prevent exploitation of the vulnerabilities, dubbed "php2shell," which have…
#Php #EmergencyPatches #Cve2026109618 #Cve2026109619 #RemoteCodeExecution
-
I don't want to underplay the severity of the 4 certificate incident. This was a huge violation of trust, and it is severe.
However, I think the likelihood of not-highly-targeted exploitation in the wild is fairly low.
Even if you are not patched, as long as *anyone* using the network you're using is patched, their clients will detect and block access to any site that's being MITM'd with the compromised cert. So anyone wanting to do an attack is going to immediately reveal that they're doing it, unless they have some way to scope the attack only to clients they know are still trusting it.
-
⚠️ A new vulnerability with increased severity was disclosed for Google Chrome (CVE-2026-113137) https://vuldb.com/vuln/424307
-
⚠️ A new vulnerability with increased severity was disclosed for Google Chrome (CVE-2026-113009) https://vuldb.com/vuln/423072
-
🐧 SIGINT // Linux Watch — 2026-10-23
Two unpatched 9.0-severity remote code execution bugs in the kernel's built-in SMB server leaked to public lists before fixes landed. If you run ksmbd for file sharing, now's a fine time to disable it or watch for the mainline patch.
🔗 https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html
-
Resharing this chart from Rafael on the number of high-severity reports fixed in the last ten security releases on #NodeJS. This is the way of the world now - you need to keep yourself patched especially if your software is exposed to the internet.
-
If you’re a vendor with a high severity exploit against your product, this is the week to drop it. Nobody will even talk about you.
Oh! Hello Fortinet! Back again I see…
-
TLS Inspector has been updated to increase the severity of the trust warning for certificate chains using any of the weak eMudhra intermediates.