Critical Dell System Update Flaw Opens a Remote Path to Root Access
Dell patched critical CVE-2026-86360 in System Update allowing unauthenticated remote root code execution. Upgrade to DSU 2.3.0.0 now.
Vulnerabilities
More news
Page 7 / 39 · 346 articles
Rejetto HFS Attacks Exploit Predictable Session Signing to Reach Remote Code Execution
Active attacks exploit CVE-2026-61500 in Rejetto HFS 3.0.0-3.2.0, abusing weak session signing to forge admin access and run code. Update to 3.2.1.
NetScaler SAML Deployments Need a Second Upgrade After CVE-2026-88779 Attacks
Citrix fixed NetScaler CVE-2026-88779 SAML memory flaw causing DoS. Check SAML configs and upgrade to 14.1-73.41 or 13.1-64.28 amid active attacks.
Google Freezes New Product-Flaw Reports to Review Its Open-Source Bounty Program
Google pauses new OSS VRP product-flaw reports amid automated spam, keeps supply-chain cases open, reviews program until Q1 2027.
NetScaler Zero-Days Put Patch Speed and Shutdown Advice to the Test
Citrix patched eight NetScaler flaws, including two exploited zero-days, sparking debate over immediate upgrades versus taking systems offline.
SConnect Flaw Lets Malicious Websites Reach a Native Host
Thales SConnect flaw CVE-2026-18397 lets malicious sites bypass signature checks and execute code via native host. Update now, SWIFT urges Web Connect.
GitLab Fixes AI Gateway Sandbox Escape Enabling Command Execution
GitLab fixed a critical AI Gateway sandbox escape that could let authenticated users execute commands. Self-hosted gateways should upgrade to patched releases.
Six Dell CSM Flaws Expose Storage Credentials, Tenant Controls, and Kubernetes Nodes
Dell patched six critical CSM flaws, including two CVSS 10.0 bugs enabling credential theft, token forgery, tenant takeover and Kubernetes root access.
Four Monta Platform Flaws Put Charging-Station Access and Availability at Risk
CISA warns four Monta monta.app flaws (CVSS 9.4) allow station impersonation, credential exposure, DoS and unauthorized charging control.