NLnet Labs released version 1.26.1 on September 16, 2026, fixing multiple severe Unbound DNS vulnerabilities. These flaws create serious risks of heap corruption, denial of service, and potential …

Linux kernel developers fixed a critical flaw tracked as CVE-2026-89775 in the KVM hypervisor on August 6, 2026. This severe KVM guest escape defect allows attackers to break out of virtual machin…

TL;DR Docker issued a patch for critical Docker Sandboxes vulnerabilities, including CVE-2026-77179 and CVE-2026-79994. These flaws enable malicious guests to escape isolated microVM workspaces an…

TL;DR VulnCheck discovered a critical heap memory corruption vulnerability tracked as CVE-2026-39919 in Ghostscript. Attackers can exploit this weakness by submitting crafted PDF documents to trig…

TL;DR Cisco fixed 18 Cisco Secure Firewall vulnerabilities on September 16, 2026. Several are critical and allow remote code execution as root. The flaws span Firewall Management Center, ASA, and …

Apple has mounted the largest vulnerability purge in its entire history: a single September cycle brought more than 260 unique CVEs and sent nearly the whole of the company’s ecosystem scram…

Although a patch for the critical VMware vCenter vulnerability has existed since late July, the situation escalated into a significantly more perilous phase over the subsequent six weeks. The Cybe…

TL;DR HP released security updates fixing ten security defects in its official Linux printing suite. These flaws allow remote attackers to execute arbitrary code or trigger denial of service witho…

HP released urgent security updates on September 16, 2026, to patch critical HP Advance vulnerabilities. These software flaws allow unauthenticated attackers to execute arbitrary code or overwrite…

TL;DR A flaw in pgAdmin 4 allows remote actors to bypass authentication when Webserver mode is active. Specifically, attackers can forge identity headers to log in as administrators without passwo…