Announcements

Fortinet has released security updates to address multiple vulnerabilities affecting several Fortinet products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, execute commands, or code via specially crafted HTTP requests to the affected product. Sample of the addressed vulnerabilities: 1. Second-Order OS Command Injection Vulnerability (CVE-2026-25089): CVSS: 9.1 Attack Vector: Network Attack

Ivanti has released a security update to fix several vulnerabilities affecting multiple versions of Ivanti Endpoint Manager Mobile (EPMM) and Ivanti Sentry. The addressed vulnerabilities could allow the attacker to bypass security restrictions, execute arbitrary code, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Ivanti Sentry Command Injection Vulnerability (CVE-2026-10520):

Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed 206 flaws, including 3 publicly disclosed zero-day vulnerabilities. Microsoft has addressed multiple vulnerabilities in this release that could allow attackers to gain elevated privileges, perform spoofing and denial-of-service attacks, bypass security restrictions, obtain sensitive information, or execute arbitrary

Veeam has released a security update to fix a vulnerability in Veeam Backup & Replication 12.3.2.4465 and all earlier versions 12 builds. The addressed vulnerability could allow the authenticated domain user to execute arbitrary code on the Backup Server. The addressed vulnerability: Veeam Backup & Replication Remote Code Execution Vulnerability (CVE-2026- 44963): CVSS 4.0: 9.4

SAP has released security updates to address several vulnerabilities affecting multiple SAP products. SAP has released a patch that fixes several vulnerabilities affecting multiple SAP products, including SAP NetWeaver AS ABAP, SAP Commerce Cloud, SAP Data Hub, SAP NetWeaver Application Server Java (Web Container), ODP Data Replication APIs, SAP S/4HANA, SAP NetWeaver AS Java (JDBC

Check Point has released security updates to fix several vulnerabilities across multiple Check Point products. The addressed vulnerabilities could allow the attacker to perform denial-of-service or man-in-the-middle attacks, manipulate data, or bypass authentication and gain unauthorized access to the affected systems. Sample of the addressed vulnerabilities: 1. Check Point VPN Remote Access and Mobile Access

Apache has released a security update to address several vulnerabilities affecting Apache HTTP Server versions 2.4.67 and earlier, fixed in version 2.4.68. The addressed vulnerabilities could allow the attacker to manipulate data, perform denial-of-service attacks and cross-site scripting attacks, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected system. Sample of

Google has released an updated Chrome version 149.0.7827.102/.103 for Windows and Mac, and 149.0.7827.102 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, memory corruption, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Use-After-Free in Gamepad Vulnerability

Progress Software Corporation has released security updates to fix several vulnerabilities across multiple Progress products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, modify account properties of other users, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: 1. Progress Sitefinity Insufficiently Protected Credentials in Web Services Vulnerability

Google has released an updated Chrome version 149.0.7827.53/54 for Windows and Mac, and 149.0.7827.53 for Linux. The addressed vulnerabilities could allow the attacker to perform spoofing and denial-of-service attacks, memory corruption, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected system via a crafted HTML page. Sample of the addressed vulnerabilities:

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Azure HorizonDB Elevation of Privilege Vulnerability (CVE-2026-48567): CVSS: 10 Attack Vector: Network Attack Complexity:

Google has released an updated Chrome version 148.0.7778.216/217 for Windows, 148.0.7778.215/216 for Mac, and 148.0.7778.215 for Linux. The addressed vulnerabilities could allow the attacker to perform spoofing and denial-of-service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected system via a crafted HTML page. Sample of the addressed vulnerabilities: 1.

Oracle released its critical patch updates for May 2026, containing 77 new security patches across multiple affected Oracle products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, bypass security restrictions, manipulate data, gain elevated privileges, execute arbitrary code, and gain access to the affected systems. Sample

Veeam has released security updates to fix several vulnerabilities across Veeam Backup & Replication 13.0.1.2067 and all earlier version 13 builds, Veeam Service Provider Console 9.2.0.33215 and all earlier version 9 builds, and Veeam ONE. The addressed vulnerabilities could allow the attacker to gain elevated privileges, manipulate sensitive files, or execute arbitrary code, and gain

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, gain elevated privileges, execute arbitrary code, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Power Pages Remote Code Execution Vulnerability (CVE-2026- 23652): CVSS: 10.0 Attack

Drupal has released security updates to address several vulnerabilities affecting multiple Drupal products. The addressed vulnerabilities could allow the attacker to conduct cross-site scripting attacks, obtain sensitive information, escalate privileges, manipulate data, execute arbitrary SQL commands, and gain access to the affected products. Samples of the addressed vulnerabilities: 1. Drupal Date iCal Information Disclosure Vulnerability

Mozilla has released an updated Firefox version 151, Firefox ESR versions 115.36 and 140.11 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to conduct denial-of- service and spoofing attacks, obtain sensitive information, bypass security restrictions, gain elevated privileges, execute arbitrary code, and gain access to the affected system. Sample of the

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, make configuration changes across tenant boundaries with the privileges of the Site Admin user, execute arbitrary code/commands, and gain access to the affected systems. Sample of addressed vulnerabilities:

Microsoft has released a security update to address a critical vulnerability affecting multiple Microsoft Azure products. The addressed vulnerability could allow the remote unauthorized attacker to elevate privileges over a network. The addressed vulnerability: Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability (CVE-2026-42822): CVSS: 10.0 Attack Vector: Network Attack Complexity: Low Privileges Required: None

Google has released an updated Chrome version 148.0.7778.167/168 for Windows and Mac, and version 148.0.7778.167 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform denial-of-service attacks, gain elevated privileges, obtain sensitive information, manipulate data, or execute arbitrary code and gain access to the affected systems. Sample of the addressed vulnerabilities: