Vulnerabilities
libp2p Rust Memory Exhaustion Flaw Threatens Network Stability
A high-severity flaw in libp2p-rust allows remote peers to exhaust memory via unbounded topic handling. Version 0.49.5 patches the issue.
Vulnerabilities
Vulnerabilities
MSPs Urged to Patch EseeCloud as Critical Auth Bypass Flaw Threatens Device Security
A critical vulnerability in EseeCloud firmware and app versions allows attackers to bypass authentication using embedded credentials, requiring immediate attention from MSPs.
Vulnerabilities
F5 and Juniper Patch Critical RCE Flaws in NGINX and Junos OS
Vendors release fixes for unauthenticated remote code execution vulnerabilities. MSPs must prioritize exposed internet-facing systems for immediate remediation.
Vulnerabilities
DOJ Media Advisories Announce Meth Arrest and Russian Extradition Proceedings
Federal agencies schedule news conferences to detail a major methamphetamine arrest and the historic extradition of a Russian national.
Vulnerabilities
Apache Answer Users Must Patch to Stop Incorrect Question Visibility Controls
Apache Answer versions before 2.0.3 contain a logic flaw that allows users with limited permissions to hide or restore questions.
Vulnerabilities
Apache Answer Users Must Patch to Stop Stale Tokens Accessing Private Files
A session flaw in Apache Answer through 2.0.2 allows revoked users to access private uploads until version 2.0.3 is deployed.
Vulnerabilities
TSG Profleet SQL Injection Risks Data Loss for Fleet Managers
A critical flaw in TSG Profleet allows attackers to manipulate database records via a specific web parameter.
Vulnerabilities
Microsoft Edge to silently install security patches and new features in background
Microsoft is developing a mechanism for Edge to automatically apply security updates and feature rollouts without user interaction, according to Neowin.
Vulnerabilities
Microsoft Ships Fixes for Dozens of Office and .NET Security Flaws
Patches address high-severity remote code execution bugs in Word and Excel, alongside issues in Identity Web and MSAL libraries.
Vulnerabilities
Containerd users must patch high-severity privilege escalation flaw
A flaw in containerd allows containers restored from checkpoints to bypass security policies and run with root privileges.
Vulnerabilities
Unauthenticated Request Can Crash Qwik Servers Before 1.20.0
A high-severity flaw in Qwik allows attackers to crash servers with one request. Fixes are available for specific npm packages.
Vulnerabilities
X.Org Server Flaw Lets Local Attackers Disclose Sensitive Information
A new use-after-free bug in X.Org Server allows local attackers to disclose sensitive information, adding to recent security concerns for the software.
Vulnerabilities
X.Org Server Patch Fixes Information Disclosure Flaw in DeviceInt Handling
A fix is available for a use-after-free bug in X.Org Server that allows local attackers to leak sensitive data from affected systems.
Vulnerabilities
X.Org Server Privilege Escalation Patch Released for Local Root Access Flaw
A confirmed update addresses a high-severity integer truncation bug in X.Org Server that allows local attackers to gain root privileges on affected systems.
Vulnerabilities
X.Org Server Patch Fixes High-Severity Local Privilege Escalation Flaw
A confirmed fix is now available for a high-severity heap overflow in X.Org Server that allows local attackers to gain root access.
Vulnerabilities
SonicWall SMA Flaw Allows Root Code Execution After Login
A CVSS 7.2 directory traversal bug in SonicWall Secure Mobile Access requires authentication but grants attackers full system control.
Vulnerabilities
Organisations urged to patch Adobe Acrobat, Reader to block AI-discovered CVE-2026-81983 remote code execution flaw
A fix is available for a memory corruption flaw in Adobe products that allows code execution when a user opens a malicious PDF document.
Vulnerabilities
Managed Sites Exposed to RCE via SPIP odt2spip Plugin Until 4.4.0 Patch Applied
VulnCheck disclosed an authenticated command injection in the SPIP odt2spip plugin, allowing low-privileged authors to execute code on web servers through crafted filenames.
Vulnerabilities
TanStack Router XSS Patch Available for Start Framework Packages
Updates fix a critical cross-site scripting flaw in TanStack Start packages that allowed attackers to inject malicious scripts via server functions.
Vulnerabilities
Nextcloud Admins Must Patch Collabora CODE Server for Critical RCE
Threat actors are actively exploiting a command injection flaw in the built-in Collabora Online CODE Server app, allowing full system control without authentication.
Vulnerabilities
Orgs urged to update NGINX to fix critical RCE and TLS session forgery flaws in F5's Oct 14 patch
F5 released NGINX versions 1.30.6 and 1.31.7 on October 14 to address five vulnerabilities, including critical memory bugs and a TLS session forgery issue.
Vulnerabilities
FreeRDP Before 3.32.0 Flaw Allows Remote Servers to Crash Client Apps
A high-severity flaw in older FreeRDP builds lets malicious servers exhaust file descriptors, forcing client termination via repeated serial port requests.
Vulnerabilities
Parse Server Crash Vulnerability Exposes Orgs to Denial of Service Attacks
Unhandled email errors crash Parse Server processes, allowing clients to force shutdowns until a fix is applied.
Vulnerabilities
Spotting Null Pointer Dereference Bugs Before They Crash Systems
Null pointer dereferences often hide behind silent data corruption rather than loud crashes, making static analysis insufficient for full detection.