Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Ravie LakshmananAug 01, 2026Vulnerability / Enterprise Security Adobe has released security updates to address a maximum-severity security flaw in Campaign...
released
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files...
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Broadcom has released security updates to address multiple security flaws impacting VMware ESX,...
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Swati KhandelwalJul 27, 2026Vulnerability / Website Security Public exploit details released on July 27 show how an unauthenticated request can...
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
Ravie LakshmananJul 23, 2026Vulnerability / Network Security Check Point has released security updates to address multiple vulnerabilities impacting Security Management...
July Patch Tuesday only feels endless
Microsoft on Tuesday released 575 patches affecting 29 product families. Sixty-three of the addressed issues are considered by Microsoft to...
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Ravie LakshmananJul 16, 2026Vulnerability / Enterprise Security Zoom has released security updates for a critical security flaw impacting Zoom Workplace...
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
Ravie LakshmananJul 15, 2026Vulnerability / Browser Security Mozilla has released updates to address two critical flaws in Firefox for which...
Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive. It has been described as...
Microsoft Patches a Record 570 Security Flaws
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other...
Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges
Ravie LakshmananJul 09, 2026Vulnerability / Endpoint Security Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly...
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
Ravie LakshmananJul 07, 2026 Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed...
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
Ravie LakshmananJul 07, 2026Vulnerability / Enterprise Security BeyondTrust has released updates to address two critical security flaws affecting Remote Support...
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Ravie LakshmananJul 01, 2026Artificial Intelligence / Vulnerability Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and...
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Ravie LakshmananJul 01, 2026Vulnerability / Enterprise Security Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC...
