⤷ Title: Apache NiFi Vulnerabilities Expose Data Pipelines to Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 03:07:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache MyFaces #Apache NiFi #CVE_2026_70469 #CVE_2026_76646 #CVE_2026_87976 #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 03:07:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache MyFaces #Apache NiFi #CVE_2026_70469 #CVE_2026_76646 #CVE_2026_87976 #Vulnerability
Daily CyberSecurity
Apache NiFi Vulnerabilities Expose Data Pipelines to Attacks
TL;DR The Apache Software Foundation released patches to address high-severity Apache NiFi vulnerabilities alongside a critical flaw in Apache MyFaces. These software defects expose enterprise dat…
⤷ Title: Apache Struts 2 REST Plugin XStream Deserialization: When XML Requests Become Remote Code Execution
════════════════════════
𐀪 Author: EternalSec
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 06:24:01 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #rce #web_security #cybersecurity #apache_struts_2
════════════════════════
𐀪 Author: EternalSec
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 06:24:01 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #rce #web_security #cybersecurity #apache_struts_2
Medium
Apache Struts 2 REST Plugin XStream Deserialization: When XML Requests Become Remote Code Execution
A trusted XML request should never be able to decide which Java objects your server creates.
⤷ Title: Apache Doris Vulnerabilities Patched in New Updates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 16:29:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Doris #CVE_2026_31377 #CVE_2026_96443 #cybersecurity #database security #Remote Code Execution #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 16:29:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Doris #CVE_2026_31377 #CVE_2026_96443 #cybersecurity #database security #Remote Code Execution #Vulnerability
Daily CyberSecurity
Apache Doris Vulnerabilities Patched in New Updates
TL;DR The Apache Software Foundation addressed two security flaws in its real-time analytics database. These Apache Doris vulnerabilities allow remote attackers to access cluster metadata or execu…
⤷ Title: Apache Tomcat Vulnerabilities Fixed in 11.0.26 Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 20:11:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_78383 #CVE_2026_86350 #CVE_2026_87022 #Denial of Service #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 20:11:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_78383 #CVE_2026_86350 #CVE_2026_87022 #Denial of Service #Vulnerability
Daily CyberSecurity
Apache Tomcat Vulnerabilities Fixed in 11.0.26 Update
TL;DR The Apache Software Foundation released version 11.0.26 to address 15 Apache Tomcat vulnerabilities. These flaws include high-impact Denial of Service (DoS) bugs, WebSocket smuggling, and se…
⤷ Title: High-Severity Apache Qpid Broker-J Vulnerabilities Fixed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 13:19:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AMQP #Apache Qpid #CVE_2026_92573 #CVE_2026_92609 #cybersecurity #Denial of Service
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 13:19:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AMQP #Apache Qpid #CVE_2026_92573 #CVE_2026_92609 #cybersecurity #Denial of Service
Daily CyberSecurity
High-Severity Apache Qpid Broker-J Vulnerabilities Fixed
TL;DR The Apache Software Foundation released version 10.1.1 to patch six Apache Qpid Broker-J vulnerabilities. These critical security defects include unauthenticated denial of service attacks an…
⤷ Title: Apache Karaf Vulnerabilities Let Low-Privilege Users Reach Admin and Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 04:28:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Karaf #Apache Karaf vulnerabilities #CVE_2026_91012 #CVE_2026_91048 #CVE_2026_92142 #JMX #privilege escalation #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 04:28:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Karaf #Apache Karaf vulnerabilities #CVE_2026_91012 #CVE_2026_91048 #CVE_2026_92142 #JMX #privilege escalation #Remote Code Execution
Daily CyberSecurity
Apache Karaf Vulnerabilities Let Low-Privilege Users Reach Admin and Code Execution
TL;DR The Apache Karaf project has fixed four Apache Karaf vulnerabilities in version 4.4.12. Two are rated important and two moderate. Each lets a user with a low-privilege role, such as “v…
⤷ Title: Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:43:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache PLC4X #Apache PLC4X vulnerability #CVE_2026_102508 #ICS security #OPC UA #OPC UA driver #OT Security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:43:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache PLC4X #Apache PLC4X vulnerability #CVE_2026_102508 #ICS security #OPC UA #OPC UA driver #OT Security
Daily CyberSecurity
Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs
TL;DR The Apache Software Foundation disclosed CVE-2026-102508, a critical Apache PLC4X vulnerability in its OPC UA driver, on September 30, 2026. It scores 9.2 under CVSS 4.0. An attacker in a ne…
⤷ Title: Critical Apache WSS4J Vulnerabilities Fixed in Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 01:47:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache WSS4J #Authentication Bypass #CVE_2026_88920 #CVE_2026_89238 #CVE_2026_95616 #cybersecurity
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 01:47:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache WSS4J #Authentication Bypass #CVE_2026_88920 #CVE_2026_89238 #CVE_2026_95616 #cybersecurity
Daily CyberSecurity
Critical Apache WSS4J Vulnerabilities Fixed in Update
TL;DR Developers disclosed six Apache WSS4J vulnerabilities. These critical security defects include authentication bypasses and denial of service flaws. Administrators must update their libraries…
⤷ Title: Critical Apache MINA SSHD Vulnerabilities Patched in Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 02:00:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache MINA SSHD #Authentication Bypass #CVE_2026_77185 #CVE_2026_94052 #CVE_2026_94053 #cybersecurity
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 02:00:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache MINA SSHD #Authentication Bypass #CVE_2026_77185 #CVE_2026_94052 #CVE_2026_94053 #cybersecurity
Daily CyberSecurity
Critical Apache MINA SSHD Vulnerabilities Patched in Update
TL;DR The Apache Software Foundation resolved eight Apache MINA SSHD vulnerabilities. These critical security defects include authentication bypasses and server-side memory exhaustion flaws. Admin…
⤷ Title: Apache HTTP Server 2.4.69 Fixes 20 Flaws, Including mod_vhost_alias Stack Overflow
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 02:37:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache HTTP Server #CVE_2026_57941 #CVE_2026_59685 #CVE_2026_63292 #HTTPD #WebDAV
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 02:37:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache HTTP Server #CVE_2026_57941 #CVE_2026_59685 #CVE_2026_63292 #HTTPD #WebDAV
Daily CyberSecurity
Apache HTTP Server 2.4.69 Fixes 20 Flaws, Including mod_vhost_alias Stack Overflow
TL;DR On October 1, the Apache Software Foundation released Apache HTTP Server 2.4.69 with fixes for 20 security flaws. Five rate moderate, led by a mod_vhost_alias stack overflow that may allow c…