News
Netty: 3 DNS Cache Poisoning Flaws and 20+ July CVEs, Fixed in 4.1.136
DevelopmentSecurityInfrastructure
Netty, the networking backbone used inside countless Java servers, has three DNS flaws that let attackers reroute an app's traffic to a fake server. The main one is CVE-2026-45674 (severity 8.7). Fixed in 4.1.135.Final (4.2.15.Final on the new line). It often hides as a transitive dependency inside Elasticsearch, gRPC and more, so check with mvn dependency:tree and update.
2026.06.13125 views
News
MariaDB Hit by Top-Severity RCE in Galera Clustering — wsrep Users Should Update Now (CVE-2026-49261)
SecurityDevelopmentInfrastructure
MariaDB, a staple database, has a maximum-severity 10.0 flaw, CVE-2026-49261. It affects Galera cluster setups (multiple servers syncing data) with the wsrep_notify_cmd notification feature enabled, where a node name can be used to take over the server. Single standalone servers are not affected. Galera users must update now to the fixed releases (10.6.27 / 10.11.18 / 11.4.12 / 11.8.8 / 12.3.2).
2026.06.1266 views
News
axios Proxy Vulnerabilities: You're Safe on 1.18.1 or Later (0.33.0 on the Old Line)
InfrastructureDevelopmentSecurity
axios, the HTTP client used by apps worldwide, has two flaws: an SSRF that leaks cloud credentials (CVE-2026-44492) and a prototype-pollution gadget that escalates to a full man-in-the-middle (CVE-2026-44494). Fixed in 1.16.0+ (0.32.0 on the old line), latest is 1.17.0. Old versions often hide as transitive dependencies, so check with npm ls axios and update.
2026.06.1259 views
News
GitLab Vulnerability Roundup: Self-Managed Servers Should Be on 19.1.2 or Later
SecurityDevelopmentInfrastructure
On June 24, 2026, GitLab fixed 14 more vulnerabilities at once, including a flaw that lets a developer run malicious code in another user's screen and one that leaks information from its AI feature. Companies running GitLab on their own servers should update now to the latest releases (19.1.1 / 19.0.3 / 18.11.6). GitLab.com users are already covered.
2026.06.1152 views
News
ShinyHunters confirmed behind PeopleSoft CVE-2026-35273
InfrastructureSecurityGlobal Companies
Oracle has issued an emergency patch for CVE-2026-35273 (CVSS 9.8) in PeopleSoft, the HR and payroll system used by large enterprises, universities and governments. Without a login, an attacker can take over the server over the network and steal the personal data, salaries and bank accounts of all employees and students at once. It is a rare out-of-cycle response; affected PeopleTools 8.61 and 8.62 should be patched now.
2026.06.11121 views
News
A Flaw in Pi-hole Let Someone on Your Network Hijack the Admin Panel Without a Password — Fixed in v6.6.1
LinuxInfrastructureSecurity
A flaw in FTL, the core engine of Pi-hole, the ad blocker widely used in homes and offices (CVE-2026-44693, CVSS 8.8): a third party on the same network can flood it while an admin is active, steal the session ID, and hijack the admin panel without a password — enabling DNS rewrites and browsing-history access. It affects v6.0 to v6.6.0; update to v6.6.1 or later now.
2026.06.1149 views
News
Dracut's Network-Boot Flaw Lets a Rogue DHCP Server Hijack Linux at Boot; Patches Are Out
InfrastructureSecurityLinux
A flaw in Dracut, the tool that handles the boot entry point for much of the Linux world (CVE-2026-6893, CVSS 8.8): a rogue server on the same network can hijack a machine with root privileges the moment it boots, striking the defenseless earliest boot stage. It affects network-boot (PXE, etc.) setups. Apply each distro's update and isolate the network.
2026.06.1148 views
News
Splunk August 2026: 60+ flaws, three rated 9.4 need no login
SecurityGlobal CompaniesInfrastructure
Two serious flaws in Splunk, the enterprise monitoring and log platform (CVE-2026-20253 and CVE-2026-20251, up to CVSS 9.8): files on the server can be created or destroyed with no login, and the server can be hijacked via arbitrary code execution from a low-privilege account. The company's watchtower becomes the target. Update Splunk Enterprise to 10.2.4 or 10.0.7 now.
2026.06.1160 views
News
Six Critical Flaws in Red Hat's OpenShift Migration Advisor: vCenter and Kubernetes Credentials at Risk, CVE-2026-53474 and More
InfrastructureSecurityGlobal Companies
Six serious flaws in Red Hat's free OpenShift Migration Advisor (CVE-2026-53469–53476, up to CVSS 9.6): broken SaaS tenant isolation stealing other tenants' config and tokens and wiping all customer data, SQL injection via RVTools reading Kubernetes keys, and plaintext agent-to-vCenter traffic leaking admin creds. Update the agent and rotate credentials.
2026.06.1139 views
News
Cisco SD-WAN CVE-2026-20245: Three Products Hit, Attack Timeline Out
Global CompaniesSecurityInfrastructure
Cisco Catalyst SD-WAN Manager (formerly vManage), which manages an enterprise's whole network, has a flaw already confirmed in attacks (CVE-2026-20245). On success, attackers seize the device's highest privilege and can push unauthorized config changes to edge devices. Cisco has released the fix 20.18.3.1; there is no workaround, so updating is required. Here are the affected versions and what to do now.
2026.06.1058 views
News
Ivanti Sentry CVE-2026-10520 Exploited (KEV): Patch the 10.0 RCE Now
MobileSecurityInfrastructure
A flaw lets attackers remotely take over Ivanti Sentry — the gateway between staff phones and corporate email — with no password (CVE-2026-10520, severity 10.0). Paired with an authentication-bypass flaw that creates administrators at will (CVE-2026-10523), it requires an update to R10.5.2 / R10.6.2 / R10.7.1. The product has been attacked repeatedly before. Here are the affected versions and what to do now.
2026.06.1068 views
News
Apache HTTP Server HTTP/2 Bomb: Affected Versions and the 2.4.68 Fix
InfrastructureSecurityAI
A flaw called the 'HTTP/2 Bomb' (CVE-2026-49975) lets even a single home PC take Apache and other major web servers offline in seconds. OpenAI's AI 'Codex' found it before humans did, a proof-of-concept is public, and Shodan shows 880,000+ servers exposed. Apache fixed it in 2.4.68, released June 8. Here are the affected versions and what to update now.
2026.06.09221 views
