TL;DR Veeam has fixed three flaws in Backup & Replication version 12, led by CVE-2025-64393. This critical Veeam Backup vulnerability scores 9.4 on CVSS 4.0 and lets a low-privileged user run …

TL;DR HPE Networking has patched nine HPE AOS-Switch vulnerabilities, and six of them rate Critical. The worst let an unauthenticated attacker run code or bypass login on the switch. Admins should…

TL;DR Maintainers of Handlebars.js have patched two critical flaws that can lead to remote code execution. Each Handlebars.js vulnerability lets an attacker run arbitrary JavaScript on a Node.js s…

TL;DR HPE Networking has fixed 28 ClearPass Policy Manager vulnerabilities in a single advisory, and ten of them rate Critical. The worst flaws let an unauthenticated remote attacker run code or g…

TL;DR The Argo CD project has fixed four critical security flaws, each rated 9.9 on CVSS. Three of these Argo CD vulnerabilities let a user run commands or read files inside the argocd-repo-server…

TL;DR Cisco has fixed a critical NX-API flaw, CVE-2026-76471, that could let an unauthenticated attacker run code as root on Nexus switches. Alongside it, Cisco shipped a hardening release that gr…

TL;DR Cisco has released fixes for four critical Cisco Nexus vulnerabilities, each rated 9.8 on CVSS. The flaws sit in the OAM features of NX-OS on Nexus 3000 and 9000 Series switches. An unauthen…

TL;DR Splunk has released two advisories that fix 22 Splunk Enterprise vulnerabilities across four supported branches. The worst, CVE-2026-76268, lets an unauthenticated attacker run operating-sys…

TL;DR IBM has released fixes for 23 IBM DataPower Gateway vulnerabilities across two security bulletins. Four rate Critical, including two remote code execution flaws scored 9.8 that need no login…

TL;DR Citrix has published a critical bulletin for CVE-2026-107406, a memory overflow flaw in NetScaler ADC and NetScaler Gateway rated 9.5 on CVSS v4.0. This Citrix NetScaler vulnerability &#8220…