Check Point released an urgent security update addressing a critical Check Point login flaw. The vulnerability allows unauthenticated remote attackers to execute arbitrary code with root privilege…

Cisco released multiple security advisories on September 16, 2026, addressing critical Cisco ISE vulnerabilities across enterprise deployments. These defects allow remote attackers to bypass authe…

TL;DR Jenkins fixed 20 plugin vulnerabilities in its September 16, 2026 advisory. Seven of them let attackers break out of the Script Security sandbox and run code on the controller. Most of these…

TL;DR VulnCheck discovered a critical heap memory corruption vulnerability tracked as CVE-2026-39919 in Ghostscript. Attackers can exploit this weakness by submitting crafted PDF documents to trig…

TL;DR Cisco fixed 18 Cisco Secure Firewall vulnerabilities on September 16, 2026. Several are critical and allow remote code execution as root. The flaws span Firewall Management Center, ASA, and …

TL;DR HP released security updates fixing ten security defects in its official Linux printing suite. These flaws allow remote attackers to execute arbitrary code or trigger denial of service witho…

HP released urgent security updates on September 16, 2026, to patch critical HP Advance vulnerabilities. These software flaws allow unauthenticated attackers to execute arbitrary code or overwrite…

Sometimes a security finding doesn’t start with an exploit.

TL;DR Security researchers uncovered a critical remote code execution chain in WordPress Core dubbed Click2Shell. The WordPress Click2Shell vulnerability allows an unauthenticated attacker to forc…

A single link in an attacker’s hands can make WordPress install a theme without a button being pressed, provided an already-authenticated administrator opens it. On September 17, WordPress r…