New Ivanti EPMM security updates address high-severity flaws that could allow a remote authenticated attacker to achieve remote code execution.

A critical PeopleSoft RCE security bug allows an unauthenticated HTTP exploit to execute code. Learn how to patch CVE-2026-35273 immediately.

Deploy the latest Spring GraphQL security patches to remediate critical unsafe deserialization flaws and cross-site WebSocket hijacking vulnerabilities.

New updates patch critical Spring security vulnerabilities, mitigating cross-site scripting and server-side request forgery risks across multiple versions.

TL;DR This weekly CVE report covers 1,909 new vulnerabilities published between June 22 and 28, 2026. Critical bugs number 173, and 14 carry a maximum CVSS score of 10. CISA added six flaws to its…

TL;DR The Zero Day Initiative published advisory ZDI-26-444 on July 15, 2026. It covers a 7-Zip vulnerability tracked as CVE-2026-14266, scored CVSS 7.0, that can lead to remote code execution. Ve…

Enterprise WSUS update servers began faltering around 13 July 2026. The disruption spread widely across corporate networks. Windows 10, Windows 11, and Windows Server systems all struggled to upda…

The Apache Syncope project has patched two security flaws in its identity management platform. Both Apache Syncope vulnerabilities carry an “important” severity rating. One allows SQL …

TL;DR ManageEngine patched a critical ADAudit Plus vulnerability tracked as CVE-2026-6516. Two weaknesses in the product’s Agent APIs, an authentication bypass and a path traversal, chain in…

TL;DR Google pushed Chrome 150.0.7871.186/.187 to the Stable channel on 23 July 2026. This Chrome security update closes four high-severity memory bugs, all found by Google’s own teams. One …

Security teams tracked 1,877 new vulnerabilities between August 3 and August 9, 2026. This weekly CVE report, drawn from the CVE WATCHTOWER service, breaks down what actually matters. Six of those…