Three critical MariaDB server vulnerabilities, including a CVSS 10 flaw, allow attackers to execute shell commands. Patch your database servers immediately.

Oracle has provided a new tool to assess the security configuration and advise on it. It is a lightweight utility and the most important…

Introduction

This week, Supabase flagged several backend tables with: RLS Disabled in Public.

TL;DR The Apache Doris project has patched a critical Apache Doris vulnerability, tracked as CVE-2026-58319. Some Frontend (FE) HTTP REST admin APIs were reachable without authentication. As a res…

TL;DR MongoDB disclosed 27 vulnerabilities across MongoDB Server and the Compass GUI client. Most are denial-of-service bugs, but several allow access-control bypass, information disclosure, or me…

Let us say we have a requirement to sort the result set based on the given input parameter . In most of the system , the developers…

TL;DR: cPanel patched a cPanel root SQL execution flaw tracked as CVE-2026-58048, rated CVSS 9.4. A second, lower-severity bug, CVE-2026-58047, allows HTTP request smuggling under limited conditio…

TL;DR Researchers at V12 Security published a MariaDB remote code execution chain. It runs commands as the mariadbd process from a low-privilege database account. Both the technical details and pr…

PostgreSQL is one of the most widely used open source database platforms in modern technology environments. It supports enterprise…

TL;DR MongoDB fixed 24 MongoDB Server vulnerabilities in recent releases. One critical flaw can leave authorization disabled at startup. Most others cause denial of service, and no in-the-wild exp…

SQL injection has been near the top of every “most dangerous web vulnerabilities” list for over two decades. It is old, well understood…

TL;DR The Apache Software Foundation addressed two security flaws in its real-time analytics database. These Apache Doris vulnerabilities allow remote attackers to access cluster metadata or execu…

TL;DR MongoDB issued security advisories detailing seven MongoDB driver vulnerabilities across its database ecosystem. These flaws allow remote attackers to redirect database connections, trigger …

TL;DR PostgreSQL developers patched a critical integer wraparound flaw in the fuzzystrmatch module. This PostgreSQL RCE vulnerability permits low-privileged database users to execute arbitrary com…

TL;DR MariaDB disclosed nine vulnerabilities on October 9, 2026, covering its database server and the Connector/C client library. Five of the MariaDB vulnerabilities rate high, with CVSS scores up…

TL;DR Progress patched 31 MarkLogic Server vulnerabilities in its October 2026 security bulletin. Three flaws score 9.9 on CVSS and can give low-privileged users elevated code execution or full ad…

TL;DR On October 16-17, 2026, Defused’s honeypots caught attackers exploiting CVE-2026-25243, a Redis RESTORE vulnerability rated CVSS 7.7. The memory bug can lead to remote code execution f…

TL;DR MariaDB disclosed seven more security flaws on October 16, 2026, including three rated CVSS 9.9. These MariaDB critical vulnerabilities let a low-privileged user corrupt memory or reach file…

TL;DR On October 20, 2026, Apache disclosed six Apache CouchDB vulnerabilities, led by a CVSS 9.3 command execution flaw. CouchDB 3.5.3 fixes all of them. Apache also published four flaws in the r…