Security news
Vulnerability news
What is affected, which versions fix it and how to check, for vulnerabilities in common technologies.
Subscribe by RSSLatest articles
-
SonicWall SSLVPN CVE-2026-19868: MFA Bypass and What to Do
SonicWall SSLVPN flaw may let attackers bypass SAML and MFA. Added to CISA KEV on 6 Nov 2026. Affected versions, fixed releases and what to...
-
Apache Tomcat Vulnerabilities, October 2026: 8 Flaws and Fixes
Eight Apache Tomcat flaws made public in October 2026. Which versions are affected, how to check LDAP, HTTP/2 and AJP settings, and how to u...
-
Movable Type Vulnerability JVN#91153973: Update or Mitigate Now
Movable Type flaw rated 9.4 (JVN#91153973): affected versions, fixed releases, workarounds if you cannot update yet, and 8.0 support ending...
-
WordPress CVE-2026-119977: Listed as Exploited, Update Now
CISA listed WordPress core flaw CVE-2026-119977 as exploited on 3 Nov 2026. Affected versions, fixed releases, how to update and how to chec...
-
Ivanti Connect Secure Zero-Days: Update Again and Investigate
Three Ivanti Connect Secure flaws were chained to gain root. Updated in October? Update again. Fixed versions, the limits of ICT, how to inv...
-
GitLab CVE-2026-97229 (CVSS 10): Exploited, Patch Now
GitLab CVE-2026-97229 (CVSS 10) is being exploited, CISA confirmed on 29 Oct 2026. Affected versions, what to update to, and why Ruby matter...
-
Linux Kernel Fragnesia (CVE-2026-46300): Exploited, Patch Now
Linux kernel flaw Fragnesia (CVE-2026-46300) is chained with PHP2shell to gain root. Fixed kernels by distribution, how to check, and what t...
-
Brotli Vulnerability CVE-2026-111497 (HTTP2Shell): What to Do
Brotli flaw CVE-2026-111497 (HTTP2Shell) is being exploited. Affected Node.js, .NET and Python versions, how to tell if you are at risk, and...
-
PHP Vulnerability CVE-2026-109618 (PHP2shell): What to Do Now
Critical PHP flaws CVE-2026-109618 and CVE-2026-109619 (PHP2shell) were patched in October 2026. How to check your PHP version, update and p...
-
Node.js Security Release, October 2026: What to Do
Node.js fixed 10 vulnerabilities, 4 rated High, in 22.x, 24.x and 26.x on 21 Oct 2026. How to check your version, update, and handle Node.js...
-
Java Vulnerabilities, October 2026: IPA Alert and Licence Changes
Oracle's October 2026 CPU fixes 55 Java SE flaws and Japan's IPA urges updating. How to check your Java, the Oracle JDK 21 licence change an...
Unsure how to go about updating?
Talk to us about updating an older system or taking over its maintenance. The consultation is free.