Alerts

F5 has released a security update to address a vulnerability affecting F5 NGINX ngx_http_rewrite_module. The addressed vulnerability could allow the remote attacker to perform denial of service (DoS) attacks on the NGINX system, or to possibly trigger code execution. The addressed vulnerability: NGINX ngx_http_rewrite_module Heap Buffer Overflow Vulnerability (CVE-2026-9256): CVSS: 8.1 Attack Vector: Network Attack

Splunk has released security updates to fix several vulnerabilities across Splunk AI Toolkit, Splunk Enterprise, and Splunk Cloud Platform. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information or perform denial-of-service attacks on the affected systems. Sample of the addressed vulnerabilities: 1. Splunk Enterprise and Splunk Cloud Platform Sensitive Information Disclosure Vulnerability

F5 has released a security update to address a vulnerability across F5 NGINX JavaScript (njs). The addressed vulnerability could allow the remote attacker to perform denial of service (DoS) attacks on the NGINX system, or to possibly trigger code execution. The addressed vulnerability: NGINX ngx_Http_Js_Module Denial of Service Vulnerability (CVE-2026-8711): CVSS: 8.1 Attack Vector: Network

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, bypass security restrictions, execute arbitrary code, or gain elevated privileges on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Defender Remote Code Execution Vulnerability (CVE-2026-45584): CVSS: 8.1 Attack Vector:

Linux has released security updates to address several vulnerabilities in Linux Kernel. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, obtain sensitive information, or gain elevated privileges on the affected system. Sample of the addressed vulnerabilities: 1. Linux Kernel Local Privilege Escalation Vulnerability (CVE-2026-46300): CVSS: 7.8 Attack Vector: Local Attack

Grafana has released security updates to fix several vulnerabilities across multiple Grafana products. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, obtain sensitive information, gain elevated privileges, manipulate files, or bypass security restrictions on the affected systems. Sample of the addressed vulnerabilities: 1. Grafana Auth Proxy IPv6 Whitelist Bypass Vulnerability (CVE-2026-33376): CVSS:

Apple has released security updates to address multiple vulnerabilities across macOS Tahoe, macOS Sequoia, macOS Sonoma, and Safari. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice attacks, gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code and gain access to affected systems. Sample of the addressed vulnerabilities: 1. Apple

Palo Alto has released security updates to address several vulnerabilities affecting multiple Palo Alto products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service and man-in-the middle attacks, bypass security restrictions, obtain sensitive information, manipulate data, gain elevated privileges, perform stored cross-site scripting, execute arbitrary code/commands, and gain access to the affected systems. Sample

HPE Aruba has released security updates to fix several vulnerabilities affecting multiple HPE Aruba products. The addressed vulnerabilities could allow the remote attacker to perform SQL injection, conduct denial of service attacks, manipulate data, obtain sensitive information, gain elevated privileges, or execute arbitrary code and gain access to the affected product. Sample of the addressed

cPanel has released security updates to address several vulnerabilities affecting multiple cPanel & WHM versions, as well as the third-party mail transfer agent Exim. The addressed vulnerabilities could allow the attacker to conduct denial-of-service or man-in-the-middle attacks, obtain sensitive information, gain elevated privileges, execute arbitrary code, and gain access to the affected products. Sample of

Mozilla has released an updated Firefox version 150.0.3 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, or execute arbitrary code and gain access to the affected system. Sample of the addressed vulnerabilities: Mozilla Firefox Use-After-Free in the JavaScript: WebAssembly Component (CVE- 2026-8390): CVSS: 7.3 Attack