Alerts

Progress Software Corporation has released a security update to fix multiple vulnerabilities affecting MOVEit transfer. The addressed vulnerabilities could allow the attacker to bypass security restrictions or perform cross-site scripting and denial-of-service attacks on the affected systems. Sample of the addressed vulnerabilities: 1. Progress MOVEit Transfer Improper Neutralization of Input During Web Page Generation (XSS)

Palo Alto has released security updates to address several vulnerabilities affecting multiple Palo Alto products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, trigger data corruption, perform server-side request forgery (SSRF), cross-site scripting (XSS), and man-in-the-middle (MitM) attacks, gain elevated privileges, bypass security restrictions, obtain sensitive information, manipulate files, or execute

Elastic has released security updates to address several vulnerabilities affecting multiple Elastic products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, manipulate data, obtain sensitive information, gain elevated privileges, perform server-side request forgery (SSRF), and cross-site scripting (XSS) attacks, leading to unauthorized access to the affected systems. Sample of addressed vulnerabilities: 1.

Linux has released security updates to address several vulnerabilities in the Linux Kernel. The addressed vulnerabilities could allow the attacker to trigger memory corruption, conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, manipulate data, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Linux Container Runtime Interface (CRI) Security

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks or obtain sensitive information on the affected systems. Sample of addressed vulnerabilities: 1. Cisco Catalyst Center Arbitrary File Read Vulnerability (CVE-2026-20191): CVSS: 7.5 Attack Vector: Network Attack Complexity: Low

libssh2 has released a security update to fix a vulnerability affecting client installations of the libssh2 library. The addressed vulnerability could allow the attacker to corrupt heap memory and potentially achieve remote code execution on the affected system. The addressed vulnerability: libssh2 Remote Code Execution Vulnerability (CVE-2026-55200): CVSS: 8.3 Attack Vector: Network Attack Complexity: Low

Citrix has released security updates to address several vulnerabilities affecting Citrix XenServer, Citrix NetScaler ADC, and Citrix NetScaler Gateway. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, trigger memory corruption, obtain sensitive information, or execute arbitrary code, and gain unauthorized access to the affected systems. Sample of the addressed vulnerabilities:

Apple has released security updates to address several vulnerabilities across macOS Tahoe and Safari. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice attacks, trigger memory corruption, clipboard hijacking, manipulate data, obtain sensitive information, or bypass security restrictions on the affected systems. Sample of the addressed vulnerabilities: 1. Apple macOS Tahoe Use-After-Free Vulnerability (CVE-2026-43731):

Linux has released security updates to address several vulnerabilities in the Linux Kernel. The addressed vulnerabilities allow the attacker to conduct denial-of-service attacks, gain elevated privileges, obtain sensitive information, manipulate data, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Linux Kernel’s Traffic Control Packet Editing (pedit)

Microsoft has released a security update to address a vulnerability affecting Microsoft Edge (Chromium-based). The addressed vulnerability could allow the remote attacker to execute arbitrary code over a network. The addressed Vulnerability: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE- 2026-50521): CVSS: 8.3 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None

Google has released an updated Chrome version 149.0.7827.200/201 for Windows and Mac and 149.0.7827.200 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities: 1. Google Chrome Integer Overflow in Mojo