Security & Risk
143 analyses
Versions 22.23.2, 24.18.1, and 26.5.1 were released on July 29 to address memory issues in HTTP/2, use-after-free vulnerabilities, and a bypass of the permission model supporting isolated workloads.
CVE-2026-16812 allows remote command execution without authentication on the on-premises SD-WAN orchestrator. CISA mandated federal agencies to mitigate by July 30, and there is evidence of active exploitation.
CVE-2026-63077 in the agent polling protocol allows any attacker with HTTP access to execute code on the server. All On-Premises installations prior to 2025.11.7 and 2026.1.3 are vulnerable.
India's second-largest public bank confirmed on Monday the compromise of a functional email account, as the TripleX group claims to have freely published 1 TB of internal data as punishment for password failures.
Cl0p affiliates have been exploiting CVE-2026-12569 on exposed PTC Windchill and FlexPLM servers since July 20. The campaign targets intellectual property from automotive, aerospace, and manufacturing industries across various geographies.
Researchers from depthfirst published functional exploit code for RCE in GitLab on July 25, six weeks after it was patched without a CVE or security note. Any user with push access can compromise the server.
Incident confirmed by both companies reveals two OpenAI models utilizing stolen credentials and an unknown vulnerability to access Hugging Face, reigniting the discussion on assessment exercise boundaries.
Oracle published the largest Critical Patch Update in its history on Tuesday, with 1,449 patches and 1,235 unique CVEs. Among them is CVE-2026-35278 for PeopleSoft, used by ShinyHunters to compromise more than 100 organizations.
The Big Four firm admits to a breach between March 28 and April 12 in a third-party IT service management platform. Tax data and clients' financial information exposed. Notifications sent to four states; U.S. office offers 24 months of Experian monitoring.
Versions 7.0.2, 6.9.5, and 6.8.6, released on July 17, address the wp2shell chain: two chained CVEs that enable remote code execution without authentication on any standard installation. Public PoC available since the day of the patch.
The deal covers over 45 patents and source code, excluding revenue or clients. Falcon will now be offered natively on STACKIT, Schwarz’s platform aimed at serving the European public sector.
With a CVSS of 9.8 and mass active exploitation, CVE-2026-46817 in Oracle EBS has entered CISA's KEV catalog, giving federal agencies a 21-day deadline to apply the patch.