Alerts

Apache has released a security update to address a vulnerability affecting Apache Tomcat. The addressed vulnerability could allow the attacker to perform denial of service attacks on the affected system. The addressed vulnerability: Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2026- 66299): CVSS: 7.5 Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None

Cisco has released a security update to address a zero-day vulnerability affecting Cisco Secure Firewall Management Center (FMC) Software. The addressed vulnerability could allow the unauthenticated remote attacker to log in to an affected device using a low-privilege account and access sensitive data within the impacted systems. The addressed vulnerability: Cisco Secure Firewall Management Center

Citrix has released security updates to address several vulnerabilities affecting XenServer The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, execute arbitrary code, and gain access to the affected products. Sample of the addressed vulnerabilities: 1. Citrix XenServer for Multiple Issues Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-62428): CVSS: 7.8 Attack Vector: Local

Progress Software Corporation has released security updates to fix several vulnerabilities affecting multiple Progress products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, execute arbitrary operating system commands, and potentially gain unauthorized access to the affected system. Sample of the addressed vulnerabilities: 1. Progress Kemp LoadMaster OS Command Injection

Progress Software Corporation has released security updates to fix multiple vulnerabilities affecting MOVEit transfer. The addressed vulnerabilities could allow the attacker to perform session hijacking or cross-site scripting (CSS) attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary scripts and gain unauthorized access to user accounts on the affected system. Sample of the addressed

Google has released an updated Chrome version 150.0.7871.186/.187 for Windows and Mac and 150.0.7871.186 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary code on the affected systems via a specially crafted HTML page. Sample of the addressed vulnerabilities: Google Chrome Use-After-Free in Blink Vulnerability (CVE-2026-16805): CVSS: 8.8

Google has released an updated Chrome version 150.0.7871.181/.182 for Windows and Mac and 150.0.7871.181 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial of service and spoofing attacks, bypass security restrictions, obtain sensitive information, trigger memory corruption, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: Google Chrome

HPE Aruba has released security updates to fix several vulnerabilities across multiple HPE Aruba products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice, cross-site scripting, and server-side request forgery attacks, trigger memory corruption, obtain sensitive information, gain elevated privileges, manipulate files, bypass security restrictions, execute arbitrary code/commands, and gain access

SolarWinds has released security updates to address several vulnerabilities affecting multiple SolarWinds products. The addressed vulnerabilities could allow the attacker to perform stored cross-site cripting attacks, gain elevated privileges, manipulate files, or execute arbitrary code, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311):

Elastic has released security updates to address several vulnerabilities across Elasticsearch and Kibana. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, obtain sensitive information, manipulate data, and perform server-side request forgery (SSRF) attacks on the affected systems. Sample of addressed vulnerabilities: 1. Authorization Bypass Through User-Controlled Key in Kibana