36 stories
How to fix CVE-2026-65660: upgrade SharePoint Server to the August 2026 fixed builds (SE 16.0.19725.20522 / 2019 16.0.10417.20198 / 2016 16.0.5565.1001). Same-day CISA KEV on SharePoint code injection RCE.
How to fix CVE-2026-71362: upgrade Adobe Commerce and Magento Open Source to the matching *-2026-aug security train (or APSB26-92 Isolated patch). Same-day CISA KEV on Magento incorrect authorization, no login.
CVE-2026-94127 affects BIG-IP APM when configured as an OAuth Authorization Server. OAuth Client-only and Resource Server-only deployments are not affected.
How to fix CVE-2026-94545: upgrade next to 16.3.6 (15.5.26 hardening if you stay on 15.x)
How to fix CVE-2026-89422: upgrade Erlang/OTP to 29.1.1, 28.5.0.7, or 27.3.4.18
How to fix CVE-2026-89139: upgrade Temporal Server to 1.31.3 or 1.30.7
The security industry killed CVE coverage as a credible metric, and it deserved to die. Vendors inflated the numbers for years in the name of depth, and nobody in the room had an incentive to ask whether they reflected real validated risk or just a longer signature list.
CVE-2026-75885 fixes are available across seven OpenShift 4 trains. Upgrade to the fixed release for the train you operate.
How to fix CVE-2026-93485: upgrade WordPress to 7.1.1. Same-day 7.1.1 security release also closes 10 other core issues.
How to fix CVE-2026-88932: upgrade multer to 2.4.0 Abort a multer disk upload before the storage engine names the file, and the complete write can still land…
How to fix CVE-2026-81642: upgrade Unbound to 1.26.1. Same-day NLnet Labs release also patches CNAME heap corruption, DoH UAF, ReTrap DoS, and related resolver bugs.
How to fix CVE-2026-84869: upgrade ScreenConnect to 26.6.5 or later, then reinstall host clients and update access agents. Same-day CISA KEV on client file-transfer execution without Host confirmation.
How to fix CVE-2026-85706: upgrade GitLab to 18.11.12 / 19.0.9 / 19.1.8 / 19.2.6 / 19.3.2
How to fix CVE-2026-42018 / CVE-2026-42016: upgrade self-hosted Artifactory past the anonymous-JWT and token-scope floors (prefer 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, or 7.161.20)
How to fix CVE-2026-71416: upgrade headroom-ai to 0.35.0 If a browser on your network can open ws://your-host:8787/v1/responses , it can ride Headroom's…
How to fix CVE-2026-87776: upgrade compression to 1.8.2 Hang up while gzip is still streaming and the Node process keeps the zlib memory forever. The Express…
How to fix CVE-2026-57967: upgrade Apache Artemis to 2.57.0. Cluster with CVE-2026-67593 and CVE-2026-49362 on the same train.
How to fix CVE-2026-0310: upgrade PAN-OS to the vendor fixed hotfix. Urgency HIGHEST. Unauth root on PA-Series via XML on mgmt or dataplane.
Showing 36 of 36 stories
You're all caught up.
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts
