Vulnerability Digest November 2026 – Third-Party Updates

This BeyondTrust Remote Support update fixes an authentication bypass flaw in the product's internal components. The components fail to properly check where incoming messages come from. Under the right conditions, an attacker can exploit this to perform file operations on the appliance and gain elevated privileges. CVE-2026-102764 has a CVSS score of 9.3, Critical severity.

Attackers are actively exploiting CVE-2026-102764. Remote Support appliances have privileged access to the endpoints they manage, so a compromised appliance puts the wider environment at risk. Treat this update as an immediate priority.

This Cisco Secure Email update closes a critical flaw in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. CVE-2026-76519 has a CVSS score of 9.8, Critical severity. The flaw comes from improper handling of email attachments when the file reputation service is enabled. An unauthenticated, remote attacker can send an email with a crafted attachment through an affected device. The attacker can then write arbitrary files and execute commands with root privileges on the underlying operating system.

Attackers are actively exploiting CVE-2026-76519. The exploit needs no credentials and no user interaction beyond delivering an email, so every exposed gateway is a direct target. Patch now.

This Discourse update closes three vulnerabilities across the open-source discussion platform, and attackers are actively exploiting CVE-2017-20290. That flaw, with a CVSS score of 6.1, Medium severity, is a reflected cross-site scripting bug in the email unsubscribe page that lets unauthenticated attackers run JavaScript in victims' browsers through a crafted link. It affects Discourse 1.9.0.beta2 before 1.9.0.beta13.

The two High severity flaws expose restricted content. CVE-2026-91156 has a CVSS score of 7.5, High severity, and lets authenticated users without Chat permission receive live and recent messages from read-restricted category chat channels. CVE-2026-91157 has a CVSS score of 7.5, High severity, and leaves media and attachments in newly restricted categories reachable by anonymous users through short upload URLs, including uploads tied to deleted topics. Versions 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9 fix both issues.

This Discourse update closes three vulnerabilities across the open-source discussion platform, and attackers are actively exploiting CVE-2017-20290. That flaw, with a CVSS score of 6.1, Medium severity, is a reflected cross-site scripting bug in the email unsubscribe page that lets unauthenticated attackers run JavaScript in victims' browsers through a crafted link. It affects Discourse 1.9.0.beta2 before 1.9.0.beta13.

The two High severity flaws expose restricted content. CVE-2026-91156 has a CVSS score of 7.5, High severity, and lets authenticated users without Chat permission receive live and recent messages from read-restricted category chat channels. CVE-2026-91157 has a CVSS score of 7.5, High severity, and leaves media and attachments in newly restricted categories reachable by anonymous users through short upload URLs, including uploads tied to deleted topics. Versions 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9 fix both issues.

This Discourse update closes three vulnerabilities across the open-source discussion platform, and attackers are actively exploiting CVE-2017-20290. That flaw, with a CVSS score of 6.1, Medium severity, is a reflected cross-site scripting bug in the email unsubscribe page that lets unauthenticated attackers run JavaScript in victims' browsers through a crafted link. It affects Discourse 1.9.0.beta2 before 1.9.0.beta13.

The two High severity flaws expose restricted content. CVE-2026-91156 has a CVSS score of 7.5, High severity, and lets authenticated users without Chat permission receive live and recent messages from read-restricted category chat channels. CVE-2026-91157 has a CVSS score of 7.5, High severity, and leaves media and attachments in newly restricted categories reachable by anonymous users through short upload URLs, including uploads tied to deleted topics. Versions 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9 fix both issues.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Gitea has patched nine vulnerabilities in its self-hosted Git service, four rated Critical and five rated High. Attackers are actively exploiting CVE-2026-59774, which has a CVSS score of 9.8, Critical severity: the Org-mode markup renderer follows INCLUDE directives into server-side files, so an unauthenticated attacker with a public repository can read any file the Gitea service account can reach, including the app.ini configuration and its internal token, then chain that access to modify a Git hook and execute commands as the service account. CVE-2026-120263 (CVSS 9.8, Critical) lets anyone with an account on a configured OAuth2 provider link their identity to another user's Gitea account, including an administrator, and sign in without its password when automatic account linking is enabled. CVE-2026-116289 and CVE-2026-117685 (both CVSS 9.1, Critical) let public-only access tokens register an organization runner that receives private repositories' workflow jobs, secrets, and variables, and mount private package blobs into public packages where anyone can download them.

The update also closes five High-severity flaws. CVE-2026-71184 and CVE-2026-73800 (both CVSS 8.8, High) let fork-controlled workflow code run on the base repository's runners with repository and organization secrets, bypassing the maintainer approval gate. CVE-2026-73804 (CVSS 8.1, High) turns a user-scoped token into unscoped API authentication by registering an attacker-controlled SSH key, and proof-of-concept code exists. CVE-2026-119441 (CVSS 7.5, High) lets a public-only token permanently delete an organization's private repositories, and CVE-2026-119533 (CVSS 7.5, High) exposes private pull request paths, titles, and states on project boards, even to anonymous visitors. Patch every Gitea instance immediately.

• Proof-of-concept code exists for the token-scope bypass that converts a user-scoped token into unscoped API access.
• Every internet-facing Gitea instance should be patched immediately because the exploited flaw requires no authentication.

Ivanti Connect Secure has three vulnerabilities that attackers are actively exploiting: CVE-2026-104935, CVE-2026-111357, and CVE-2026-118527. CVE-2026-104935 has a CVSS score of 8.6, High severity; it is an authentication bypass by spoofing that lets a remote unauthenticated attacker execute arbitrary commands. CVE-2026-111357 has a CVSS score of 7.0, High severity; the dsinvoked broker trusts DSCache configuration data improperly, which leads to privilege escalation to root. CVE-2026-118527 has a CVSS score of 4.3, Medium severity; predictable filenames let a remote authenticated attacker upload files with attacker-controlled content to a known location on disk.

Together, these flaws give attackers a path from no credentials to arbitrary commands and root-level control of the remote access gateway. This update fixes all three vulnerabilities and should be deployed immediately.

Ivanti Connect Secure has three vulnerabilities that attackers are actively exploiting: CVE-2026-104935, CVE-2026-111357, and CVE-2026-118527. CVE-2026-104935 has a CVSS score of 8.6, High severity; it is an authentication bypass by spoofing that lets a remote unauthenticated attacker execute arbitrary commands. CVE-2026-111357 has a CVSS score of 7.0, High severity; the dsinvoked broker trusts DSCache configuration data improperly, which leads to privilege escalation to root. CVE-2026-118527 has a CVSS score of 4.3, Medium severity; predictable filenames let a remote authenticated attacker upload files with attacker-controlled content to a known location on disk.

Together, these flaws give attackers a path from no credentials to arbitrary commands and root-level control of the remote access gateway. This update fixes all three vulnerabilities and should be deployed immediately.

Ivanti Connect Secure has three vulnerabilities that attackers are actively exploiting: CVE-2026-104935, CVE-2026-111357, and CVE-2026-118527. CVE-2026-104935 has a CVSS score of 8.6, High severity; it is an authentication bypass by spoofing that lets a remote unauthenticated attacker execute arbitrary commands. CVE-2026-111357 has a CVSS score of 7.0, High severity; the dsinvoked broker trusts DSCache configuration data improperly, which leads to privilege escalation to root. CVE-2026-118527 has a CVSS score of 4.3, Medium severity; predictable filenames let a remote authenticated attacker upload files with attacker-controlled content to a known location on disk.

Together, these flaws give attackers a path from no credentials to arbitrary commands and root-level control of the remote access gateway. This update fixes all three vulnerabilities and should be deployed immediately.

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This Linux update fixes eleven Critical flaws in the kernel's networking, virtualization, storage, and file system code. Attackers are actively exploiting CVE-2026-99999, a flaw in IPv4 checksum handling where a packet with malformed checksum metadata can corrupt the network header. CVE-2026-99999 has a CVSS score of 9.3, Critical severity. The other fixes close use-after-free bugs in IPv4 TCP option handling (CVE-2026-98432, CVSS 9.8, Critical), RISC-V KVM vCPU teardown (CVE-2026-98464, CVSS 9.3, Critical), Open vSwitch connection-tracking helpers (CVE-2026-98490, CVSS 9.8, Critical), and SCTP stale-cookie processing, which any malicious SCTP peer can trigger with no privileges (CVE-2026-98548, CVSS 9.8, Critical).

The update also stops TCP from merging retransmitted segments across an encryption boundary, a flaw that can send PSP-protected data in cleartext or stall TLS-offloaded connections (CVE-2026-98549, CVSS 9.1, Critical). It repairs btrfs metadata corruption and lost extended attributes after a value is replaced (CVE-2026-98959, CVSS 9.8, Critical). It fixes stale AF_XDP buffer releases in the mlx5e driver that free buffers still in use (CVE-2026-99078 and CVE-2026-99079, each CVSS 9.8, Critical). Finally, it adds strict validation of task indexes that iSCSI targets supply, which prevents crashes, out-of-bounds reads, and SCSI reads falsely reported as complete (CVE-2026-99153 and CVE-2026-99154, each CVSS 9.8, Critical).

This PHP update fixes two critical memory-handling flaws that lead to remote code execution. CVE-2026-109618 has a CVSS score of 9.2, Critical severity. When PHP aborts a request after an out-of-memory error, some code paths leave request memory uninitialized, and the cleanup routine then reads that memory. CVE-2026-109619 has a CVSS score of 9.2, Critical severity. PHP global state can keep pointing at request memory after it is freed, so later requests act on stale data. Attackers can trigger either condition reliably to run code and gain elevated privileges.

Attackers are actively exploiting CVE-2026-109618 and CVE-2026-109619. PHP runs a large share of web applications, so every unpatched server is directly exposed. Treat this as an immediate patch priority.

This PHP update fixes two critical memory-handling flaws that lead to remote code execution. CVE-2026-109618 has a CVSS score of 9.2, Critical severity. When PHP aborts a request after an out-of-memory error, some code paths leave request memory uninitialized, and the cleanup routine then reads that memory. CVE-2026-109619 has a CVSS score of 9.2, Critical severity. PHP global state can keep pointing at request memory after it is freed, so later requests act on stale data. Attackers can trigger either condition reliably to run code and gain elevated privileges.

Attackers are actively exploiting CVE-2026-109618 and CVE-2026-109619. PHP runs a large share of web applications, so every unpatched server is directly exposed. Treat this as an immediate patch priority.

Retool 3.88.0 fixes a cross-site scripting vulnerability in the /api/imageProxy endpoint. CVE-2024-58394 has a CVSS score of 6.1, Medium severity. An unauthenticated attacker can pass a link to an SVG file they host in the url parameter. Retool then serves that file from its own origin with no Content Security Policy, so the attacker's JavaScript runs inside the victim's session.

Attackers are actively exploiting CVE-2024-58394. Retool often connects directly to internal databases, APIs and business workflows, so a hijacked session gives attackers a trusted path into sensitive operations. Upgrade every Retool deployment to version 3.88.0 or later now.

This Weaver E-cology update fixes two High severity flaws that unauthenticated attackers can reach directly over the network. CVE-2021-48013 has a CVSS score of 7.5, High severity. It is a path traversal flaw in the /weaver/ln.FileDownload endpoint of E-cology 8.0, where crafted requests let attackers read arbitrary server files, including sensitive configuration such as WEB-INF/web.xml. CVE-2025-71434 has a CVSS score of 8.2, High severity. It is an SQL injection flaw in the /api/doc/out/more/list endpoint that affects E-cology 8.0, 9.0, and 10.0 before 10.76, and it lets attackers pull information straight from the backend database.

Attackers are actively exploiting CVE-2021-48013 and CVE-2025-71434. Together, these flaws expose server configuration and database contents to anyone who can reach the application. Patch immediately.

This Weaver E-cology update fixes two High severity flaws that unauthenticated attackers can reach directly over the network. CVE-2021-48013 has a CVSS score of 7.5, High severity. It is a path traversal flaw in the /weaver/ln.FileDownload endpoint of E-cology 8.0, where crafted requests let attackers read arbitrary server files, including sensitive configuration such as WEB-INF/web.xml. CVE-2025-71434 has a CVSS score of 8.2, High severity. It is an SQL injection flaw in the /api/doc/out/more/list endpoint that affects E-cology 8.0, 9.0, and 10.0 before 10.76, and it lets attackers pull information straight from the backend database.

Attackers are actively exploiting CVE-2021-48013 and CVE-2025-71434. Together, these flaws expose server configuration and database contents to anyone who can reach the application. Patch immediately.

The Adobe Commerce update fixes seven vulnerabilities, five of them Critical, that put storefront code, admin sessions, and customer accounts at risk. The most severe, CVE-2026-103849, has a CVSS score of 10.0, Critical severity. It is a template engine injection flaw that allows arbitrary code execution without user interaction, and proof-of-concept code is available. CVE-2026-92909 has a CVSS score of 9.8, Critical severity, and CVE-2026-92464 has a CVSS score of 9.1, Critical severity. Both allow arbitrary code execution, CVE-2026-92909 through incorrect authorization and CVE-2026-92464 through improper input validation by an attacker with high privileges.

The update also closes two stored cross-site scripting flaws, CVE-2026-100133 and CVE-2026-91013, each with a CVSS score of 9.3, Critical severity. They let attackers inject scripts into form fields to take over victim sessions and accounts. Two authorization bypass flaws complete the fix: CVE-2026-92908 has a CVSS score of 8.3, High severity, and CVE-2026-92910 has a CVSS score of 7.2, High severity. Both give attackers unauthorized read and write access.

The Adobe Commerce update fixes seven vulnerabilities, five of them Critical, that put storefront code, admin sessions, and customer accounts at risk. The most severe, CVE-2026-103849, has a CVSS score of 10.0, Critical severity. It is a template engine injection flaw that allows arbitrary code execution without user interaction, and proof-of-concept code is available. CVE-2026-92909 has a CVSS score of 9.8, Critical severity, and CVE-2026-92464 has a CVSS score of 9.1, Critical severity. Both allow arbitrary code execution, CVE-2026-92909 through incorrect authorization and CVE-2026-92464 through improper input validation by an attacker with high privileges.

The update also closes two stored cross-site scripting flaws, CVE-2026-100133 and CVE-2026-91013, each with a CVSS score of 9.3, Critical severity. They let attackers inject scripts into form fields to take over victim sessions and accounts. Two authorization bypass flaws complete the fix: CVE-2026-92908 has a CVSS score of 8.3, High severity, and CVE-2026-92910 has a CVSS score of 7.2, High severity. Both give attackers unauthorized read and write access.

The Adobe Commerce update fixes seven vulnerabilities, five of them Critical, that put storefront code, admin sessions, and customer accounts at risk. The most severe, CVE-2026-103849, has a CVSS score of 10.0, Critical severity. It is a template engine injection flaw that allows arbitrary code execution without user interaction, and proof-of-concept code is available. CVE-2026-92909 has a CVSS score of 9.8, Critical severity, and CVE-2026-92464 has a CVSS score of 9.1, Critical severity. Both allow arbitrary code execution, CVE-2026-92909 through incorrect authorization and CVE-2026-92464 through improper input validation by an attacker with high privileges.

The update also closes two stored cross-site scripting flaws, CVE-2026-100133 and CVE-2026-91013, each with a CVSS score of 9.3, Critical severity. They let attackers inject scripts into form fields to take over victim sessions and accounts. Two authorization bypass flaws complete the fix: CVE-2026-92908 has a CVSS score of 8.3, High severity, and CVE-2026-92910 has a CVSS score of 7.2, High severity. Both give attackers unauthorized read and write access.

The Adobe Commerce update fixes seven vulnerabilities, five of them Critical, that put storefront code, admin sessions, and customer accounts at risk. The most severe, CVE-2026-103849, has a CVSS score of 10.0, Critical severity. It is a template engine injection flaw that allows arbitrary code execution without user interaction, and proof-of-concept code is available. CVE-2026-92909 has a CVSS score of 9.8, Critical severity, and CVE-2026-92464 has a CVSS score of 9.1, Critical severity. Both allow arbitrary code execution, CVE-2026-92909 through incorrect authorization and CVE-2026-92464 through improper input validation by an attacker with high privileges.

The update also closes two stored cross-site scripting flaws, CVE-2026-100133 and CVE-2026-91013, each with a CVSS score of 9.3, Critical severity. They let attackers inject scripts into form fields to take over victim sessions and accounts. Two authorization bypass flaws complete the fix: CVE-2026-92908 has a CVSS score of 8.3, High severity, and CVE-2026-92910 has a CVSS score of 7.2, High severity. Both give attackers unauthorized read and write access.

The Adobe Commerce update fixes seven vulnerabilities, five of them Critical, that put storefront code, admin sessions, and customer accounts at risk. The most severe, CVE-2026-103849, has a CVSS score of 10.0, Critical severity. It is a template engine injection flaw that allows arbitrary code execution without user interaction, and proof-of-concept code is available. CVE-2026-92909 has a CVSS score of 9.8, Critical severity, and CVE-2026-92464 has a CVSS score of 9.1, Critical severity. Both allow arbitrary code execution, CVE-2026-92909 through incorrect authorization and CVE-2026-92464 through improper input validation by an attacker with high privileges.

The update also closes two stored cross-site scripting flaws, CVE-2026-100133 and CVE-2026-91013, each with a CVSS score of 9.3, Critical severity. They let attackers inject scripts into form fields to take over victim sessions and accounts. Two authorization bypass flaws complete the fix: CVE-2026-92908 has a CVSS score of 8.3, High severity, and CVE-2026-92910 has a CVSS score of 7.2, High severity. Both give attackers unauthorized read and write access.

The Adobe Commerce update fixes seven vulnerabilities, five of them Critical, that put storefront code, admin sessions, and customer accounts at risk. The most severe, CVE-2026-103849, has a CVSS score of 10.0, Critical severity. It is a template engine injection flaw that allows arbitrary code execution without user interaction, and proof-of-concept code is available. CVE-2026-92909 has a CVSS score of 9.8, Critical severity, and CVE-2026-92464 has a CVSS score of 9.1, Critical severity. Both allow arbitrary code execution, CVE-2026-92909 through incorrect authorization and CVE-2026-92464 through improper input validation by an attacker with high privileges.

The update also closes two stored cross-site scripting flaws, CVE-2026-100133 and CVE-2026-91013, each with a CVSS score of 9.3, Critical severity. They let attackers inject scripts into form fields to take over victim sessions and accounts. Two authorization bypass flaws complete the fix: CVE-2026-92908 has a CVSS score of 8.3, High severity, and CVE-2026-92910 has a CVSS score of 7.2, High severity. Both give attackers unauthorized read and write access.

The Adobe Commerce update fixes seven vulnerabilities, five of them Critical, that put storefront code, admin sessions, and customer accounts at risk. The most severe, CVE-2026-103849, has a CVSS score of 10.0, Critical severity. It is a template engine injection flaw that allows arbitrary code execution without user interaction, and proof-of-concept code is available. CVE-2026-92909 has a CVSS score of 9.8, Critical severity, and CVE-2026-92464 has a CVSS score of 9.1, Critical severity. Both allow arbitrary code execution, CVE-2026-92909 through incorrect authorization and CVE-2026-92464 through improper input validation by an attacker with high privileges.

The update also closes two stored cross-site scripting flaws, CVE-2026-100133 and CVE-2026-91013, each with a CVSS score of 9.3, Critical severity. They let attackers inject scripts into form fields to take over victim sessions and accounts. Two authorization bypass flaws complete the fix: CVE-2026-92908 has a CVSS score of 8.3, High severity, and CVE-2026-92910 has a CVSS score of 7.2, High severity. Both give attackers unauthorized read and write access.

This update for Adobe Experience Manager 6.5 fixes an Improper Input Validation flaw, CVE-2026-105895, which has a CVSS score of 9.9, Critical severity. An attacker can use the flaw to run arbitrary code as the current user and possibly gain elevated access to, or control over, the victim's account or session.

The attack needs no user interaction, and its scope is changed, so the damage can reach beyond the vulnerable component. Organizations running Adobe Experience Manager 6.5 should treat this as a same-day priority and apply the update right away.

This Adobe Experience Manager 6.5 LTS update fixes five vulnerabilities, four of them Critical, that put the content platform and its users at risk. The most severe is an OS command injection flaw that lets a low-privileged attacker run arbitrary code with no user interaction. An incorrect authorization flaw can also lead to arbitrary code execution and elevated control over a victim's account or session. Two stored cross-site scripting flaws let attackers plant malicious scripts in form fields that run in the browsers of visitors, which can lead to account or session takeover. A path traversal flaw lets a low-privileged attacker write files to unauthorized locations on the file system. Every flaw has changed scope, so an attack can reach beyond the vulnerable component.

CVE-2026-103848 has a CVSS score of 9.9, Critical severity. CVE-2026-75732 has a CVSS score of 9.9, Critical severity. CVE-2026-106629 has a CVSS score of 9.3, Critical severity. CVE-2026-106630 has a CVSS score of 9.3, Critical severity. CVE-2026-106634 has a CVSS score of 7.7, High severity.

This Adobe Experience Manager 6.5 LTS update fixes five vulnerabilities, four of them Critical, that put the content platform and its users at risk. The most severe is an OS command injection flaw that lets a low-privileged attacker run arbitrary code with no user interaction. An incorrect authorization flaw can also lead to arbitrary code execution and elevated control over a victim's account or session. Two stored cross-site scripting flaws let attackers plant malicious scripts in form fields that run in the browsers of visitors, which can lead to account or session takeover. A path traversal flaw lets a low-privileged attacker write files to unauthorized locations on the file system. Every flaw has changed scope, so an attack can reach beyond the vulnerable component.

CVE-2026-103848 has a CVSS score of 9.9, Critical severity. CVE-2026-75732 has a CVSS score of 9.9, Critical severity. CVE-2026-106629 has a CVSS score of 9.3, Critical severity. CVE-2026-106630 has a CVSS score of 9.3, Critical severity. CVE-2026-106634 has a CVSS score of 7.7, High severity.

This Adobe Experience Manager 6.5 LTS update fixes five vulnerabilities, four of them Critical, that put the content platform and its users at risk. The most severe is an OS command injection flaw that lets a low-privileged attacker run arbitrary code with no user interaction. An incorrect authorization flaw can also lead to arbitrary code execution and elevated control over a victim's account or session. Two stored cross-site scripting flaws let attackers plant malicious scripts in form fields that run in the browsers of visitors, which can lead to account or session takeover. A path traversal flaw lets a low-privileged attacker write files to unauthorized locations on the file system. Every flaw has changed scope, so an attack can reach beyond the vulnerable component.

CVE-2026-103848 has a CVSS score of 9.9, Critical severity. CVE-2026-75732 has a CVSS score of 9.9, Critical severity. CVE-2026-106629 has a CVSS score of 9.3, Critical severity. CVE-2026-106630 has a CVSS score of 9.3, Critical severity. CVE-2026-106634 has a CVSS score of 7.7, High severity.

This Adobe Experience Manager 6.5 LTS update fixes five vulnerabilities, four of them Critical, that put the content platform and its users at risk. The most severe is an OS command injection flaw that lets a low-privileged attacker run arbitrary code with no user interaction. An incorrect authorization flaw can also lead to arbitrary code execution and elevated control over a victim's account or session. Two stored cross-site scripting flaws let attackers plant malicious scripts in form fields that run in the browsers of visitors, which can lead to account or session takeover. A path traversal flaw lets a low-privileged attacker write files to unauthorized locations on the file system. Every flaw has changed scope, so an attack can reach beyond the vulnerable component.

CVE-2026-103848 has a CVSS score of 9.9, Critical severity. CVE-2026-75732 has a CVSS score of 9.9, Critical severity. CVE-2026-106629 has a CVSS score of 9.3, Critical severity. CVE-2026-106630 has a CVSS score of 9.3, Critical severity. CVE-2026-106634 has a CVSS score of 7.7, High severity.

This Adobe Experience Manager 6.5 LTS update fixes five vulnerabilities, four of them Critical, that put the content platform and its users at risk. The most severe is an OS command injection flaw that lets a low-privileged attacker run arbitrary code with no user interaction. An incorrect authorization flaw can also lead to arbitrary code execution and elevated control over a victim's account or session. Two stored cross-site scripting flaws let attackers plant malicious scripts in form fields that run in the browsers of visitors, which can lead to account or session takeover. A path traversal flaw lets a low-privileged attacker write files to unauthorized locations on the file system. Every flaw has changed scope, so an attack can reach beyond the vulnerable component.

CVE-2026-103848 has a CVSS score of 9.9, Critical severity. CVE-2026-75732 has a CVSS score of 9.9, Critical severity. CVE-2026-106629 has a CVSS score of 9.3, Critical severity. CVE-2026-106630 has a CVSS score of 9.3, Critical severity. CVE-2026-106634 has a CVSS score of 7.7, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

This Adobe ColdFusion 2025 update fixes 21 vulnerabilities, 10 Critical and 11 High. Most of them allow arbitrary code execution, and nearly all need no user interaction. They include code injection, unrestricted upload of dangerous files, server-side request forgery, path traversal through RDS, and a large set of incorrect authorization flaws. Low-privileged attackers can use these flaws to run code, bypass security controls, gain unauthorized write access, escalate privileges, or read sensitive files and memory.

Critical: CVE-2026-105899, CVE-2026-106622, and CVE-2026-106624 each have a CVSS score of 10.0, Critical severity. CVE-2026-105903 and CVE-2026-106612 each have a CVSS score of 9.9, Critical severity. CVE-2026-106620 and CVE-2026-75994 each have a CVSS score of 9.6, Critical severity. CVE-2026-90530 has a CVSS score of 9.3, Critical severity. CVE-2026-106621 has a CVSS score of 9.1, Critical severity. CVE-2026-106619 has a CVSS score of 9.0, Critical severity. High: CVE-2026-105901, CVE-2026-106089, CVE-2026-106090, CVE-2026-106615, CVE-2026-106617, and CVE-2026-106618 each have a CVSS score of 8.8, High severity. CVE-2026-71385 has a CVSS score of 8.4, High severity. CVE-2026-105898 has a CVSS score of 8.2, High severity. CVE-2026-106614 has a CVSS score of 7.8, High severity. CVE-2026-105994 has a CVSS score of 7.7, High severity. CVE-2026-106623 has a CVSS score of 7.5, High severity.

AnyDesk 8.0.3 fixes a heap-based buffer overflow in the session protocol's stream packet handler. CVE-2026-109390 has a CVSS score of 9.8, Critical severity. In mode 5, the handler does not validate a payload length value. An unauthenticated remote attacker can use this to execute arbitrary code, and on Linux this has been shown to give command execution as root without the victim ever approving desktop control.

Proof-of-concept code exists for CVE-2026-109390. Every AnyDesk installation before version 8.0.3 is exposed, so organizations should move all endpoints to 8.0.3 or later.

Apache Tomcat versions 11.0.27, 10.1.61, and 9.0.123 fix four vulnerabilities: three Critical and one High. The most serious flaw lets attackers log in without the correct password when the JNDI realm uses a non-GSSAPI SASL authentication mechanism. CVE-2026-101296 has a CVSS score of 9.1, Critical severity. Two more Critical flaws can leak data between users: an object recycling error in HTTP/2 processing of asynchronous servlets can mix up requests and responses between users, and a buffer under-read in large non-blocking writes can spill one response into the next request on the same connection. CVE-2026-101356 has a CVSS score of 9.1, Critical severity. CVE-2026-103119 has a CVSS score of 9.1, Critical severity.

The update also closes a race condition in the APR/Native connector that lets an unauthorized local user access the unix domain socket and gain elevated privileges. CVE-2026-80353 has a CVSS score of 8.1, High severity, and affects the 9.0 branch only. The authentication bypass also affects end-of-life 8.5 and 7.0 releases, which receive no fix; organizations still running them should move to a supported branch.

Apache Tomcat versions 11.0.27, 10.1.61, and 9.0.123 fix four vulnerabilities: three Critical and one High. The most serious flaw lets attackers log in without the correct password when the JNDI realm uses a non-GSSAPI SASL authentication mechanism. CVE-2026-101296 has a CVSS score of 9.1, Critical severity. Two more Critical flaws can leak data between users: an object recycling error in HTTP/2 processing of asynchronous servlets can mix up requests and responses between users, and a buffer under-read in large non-blocking writes can spill one response into the next request on the same connection. CVE-2026-101356 has a CVSS score of 9.1, Critical severity. CVE-2026-103119 has a CVSS score of 9.1, Critical severity.

The update also closes a race condition in the APR/Native connector that lets an unauthorized local user access the unix domain socket and gain elevated privileges. CVE-2026-80353 has a CVSS score of 8.1, High severity, and affects the 9.0 branch only. The authentication bypass also affects end-of-life 8.5 and 7.0 releases, which receive no fix; organizations still running them should move to a supported branch.

Apache Tomcat versions 11.0.27, 10.1.61, and 9.0.123 fix four vulnerabilities: three Critical and one High. The most serious flaw lets attackers log in without the correct password when the JNDI realm uses a non-GSSAPI SASL authentication mechanism. CVE-2026-101296 has a CVSS score of 9.1, Critical severity. Two more Critical flaws can leak data between users: an object recycling error in HTTP/2 processing of asynchronous servlets can mix up requests and responses between users, and a buffer under-read in large non-blocking writes can spill one response into the next request on the same connection. CVE-2026-101356 has a CVSS score of 9.1, Critical severity. CVE-2026-103119 has a CVSS score of 9.1, Critical severity.

The update also closes a race condition in the APR/Native connector that lets an unauthorized local user access the unix domain socket and gain elevated privileges. CVE-2026-80353 has a CVSS score of 8.1, High severity, and affects the 9.0 branch only. The authentication bypass also affects end-of-life 8.5 and 7.0 releases, which receive no fix; organizations still running them should move to a supported branch.

Apache Tomcat versions 11.0.27, 10.1.61, and 9.0.123 fix four vulnerabilities: three Critical and one High. The most serious flaw lets attackers log in without the correct password when the JNDI realm uses a non-GSSAPI SASL authentication mechanism. CVE-2026-101296 has a CVSS score of 9.1, Critical severity. Two more Critical flaws can leak data between users: an object recycling error in HTTP/2 processing of asynchronous servlets can mix up requests and responses between users, and a buffer under-read in large non-blocking writes can spill one response into the next request on the same connection. CVE-2026-101356 has a CVSS score of 9.1, Critical severity. CVE-2026-103119 has a CVSS score of 9.1, Critical severity.

The update also closes a race condition in the APR/Native connector that lets an unauthorized local user access the unix domain socket and gain elevated privileges. CVE-2026-80353 has a CVSS score of 8.1, High severity, and affects the 9.0 branch only. The authentication bypass also affects end-of-life 8.5 and 7.0 releases, which receive no fix; organizations still running them should move to a supported branch.

Argo CD versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2 fix five vulnerabilities in the GitOps delivery tool's repo-server and application-controller. Four of them are Critical and one is High. CVE-2026-113672 has a CVSS score of 9.9, Critical severity: the Jsonnet importer can read any file the repo-server can access, including service-account tokens, private keys, and repository credentials. CVE-2026-113708 has a CVSS score of 9.9, Critical severity: a Kustomize argument injection lets an attacker run commands inside argocd-repo-server. CVE-2026-113709 has a CVSS score of 9.9, Critical severity: on deployments that enable Helm for Kustomize builds, a Helm plugin stored in a repository runs inside argocd-repo-server. CVE-2026-77459 has a CVSS score of 9.9, Critical severity: PostDelete hooks skip AppProject authorization checks, so the controller can create forbidden resources, including cluster-scoped ones, with its own cluster credentials.

CVE-2026-55797 has a CVSS score of 8.8, High severity: a shell command injection through an SSH proxy setting lets a user who can manage repositories run commands in the repo-server and take its Git, Helm, and OCI credentials. Several of these flaws need only Application get permission or write access to a Git repository, so an attacker with little access can reach the credentials behind the whole deployment pipeline.

Argo CD versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2 fix five vulnerabilities in the GitOps delivery tool's repo-server and application-controller. Four of them are Critical and one is High. CVE-2026-113672 has a CVSS score of 9.9, Critical severity: the Jsonnet importer can read any file the repo-server can access, including service-account tokens, private keys, and repository credentials. CVE-2026-113708 has a CVSS score of 9.9, Critical severity: a Kustomize argument injection lets an attacker run commands inside argocd-repo-server. CVE-2026-113709 has a CVSS score of 9.9, Critical severity: on deployments that enable Helm for Kustomize builds, a Helm plugin stored in a repository runs inside argocd-repo-server. CVE-2026-77459 has a CVSS score of 9.9, Critical severity: PostDelete hooks skip AppProject authorization checks, so the controller can create forbidden resources, including cluster-scoped ones, with its own cluster credentials.

CVE-2026-55797 has a CVSS score of 8.8, High severity: a shell command injection through an SSH proxy setting lets a user who can manage repositories run commands in the repo-server and take its Git, Helm, and OCI credentials. Several of these flaws need only Application get permission or write access to a Git repository, so an attacker with little access can reach the credentials behind the whole deployment pipeline.

Argo CD versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2 fix five vulnerabilities in the GitOps delivery tool's repo-server and application-controller. Four of them are Critical and one is High. CVE-2026-113672 has a CVSS score of 9.9, Critical severity: the Jsonnet importer can read any file the repo-server can access, including service-account tokens, private keys, and repository credentials. CVE-2026-113708 has a CVSS score of 9.9, Critical severity: a Kustomize argument injection lets an attacker run commands inside argocd-repo-server. CVE-2026-113709 has a CVSS score of 9.9, Critical severity: on deployments that enable Helm for Kustomize builds, a Helm plugin stored in a repository runs inside argocd-repo-server. CVE-2026-77459 has a CVSS score of 9.9, Critical severity: PostDelete hooks skip AppProject authorization checks, so the controller can create forbidden resources, including cluster-scoped ones, with its own cluster credentials.

CVE-2026-55797 has a CVSS score of 8.8, High severity: a shell command injection through an SSH proxy setting lets a user who can manage repositories run commands in the repo-server and take its Git, Helm, and OCI credentials. Several of these flaws need only Application get permission or write access to a Git repository, so an attacker with little access can reach the credentials behind the whole deployment pipeline.

Argo CD versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2 fix five vulnerabilities in the GitOps delivery tool's repo-server and application-controller. Four of them are Critical and one is High. CVE-2026-113672 has a CVSS score of 9.9, Critical severity: the Jsonnet importer can read any file the repo-server can access, including service-account tokens, private keys, and repository credentials. CVE-2026-113708 has a CVSS score of 9.9, Critical severity: a Kustomize argument injection lets an attacker run commands inside argocd-repo-server. CVE-2026-113709 has a CVSS score of 9.9, Critical severity: on deployments that enable Helm for Kustomize builds, a Helm plugin stored in a repository runs inside argocd-repo-server. CVE-2026-77459 has a CVSS score of 9.9, Critical severity: PostDelete hooks skip AppProject authorization checks, so the controller can create forbidden resources, including cluster-scoped ones, with its own cluster credentials.

CVE-2026-55797 has a CVSS score of 8.8, High severity: a shell command injection through an SSH proxy setting lets a user who can manage repositories run commands in the repo-server and take its Git, Helm, and OCI credentials. Several of these flaws need only Application get permission or write access to a Git repository, so an attacker with little access can reach the credentials behind the whole deployment pipeline.

Argo CD versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2 fix five vulnerabilities in the GitOps delivery tool's repo-server and application-controller. Four of them are Critical and one is High. CVE-2026-113672 has a CVSS score of 9.9, Critical severity: the Jsonnet importer can read any file the repo-server can access, including service-account tokens, private keys, and repository credentials. CVE-2026-113708 has a CVSS score of 9.9, Critical severity: a Kustomize argument injection lets an attacker run commands inside argocd-repo-server. CVE-2026-113709 has a CVSS score of 9.9, Critical severity: on deployments that enable Helm for Kustomize builds, a Helm plugin stored in a repository runs inside argocd-repo-server. CVE-2026-77459 has a CVSS score of 9.9, Critical severity: PostDelete hooks skip AppProject authorization checks, so the controller can create forbidden resources, including cluster-scoped ones, with its own cluster credentials.

CVE-2026-55797 has a CVSS score of 8.8, High severity: a shell command injection through an SSH proxy setting lets a user who can manage repositories run commands in the repo-server and take its Git, Helm, and OCI credentials. Several of these flaws need only Application get permission or write access to a Git repository, so an attacker with little access can reach the credentials behind the whole deployment pipeline.

Best Practice Software Bp Premier versions before 1.14.1.1128 ship with a hardcoded Microsoft SQL Server administrator password. Every installation uses the same password, and it cannot be changed without breaking the application. An attacker who can reach the database instance over the network can log in as sysadmin, bypass application authentication, and run operating system commands as SYSTEM. CVE-2026-114119 has a CVSS score of 9.8, Critical severity.

Version 1.14.1.1128 fixes the flaw by removing the shared credential. Until it is installed, every exposed Bp Premier database server is open to full system takeover, so update now.

Cisco Emergency Responder has received software hardening releases that fix five vulnerabilities found in an internal Cisco security review. The update closes an injection weakness, an authentication flaw, a cross-site scripting issue, an access control gap, and a path traversal weakness. Three of these flaws allow privilege escalation, so an attacker who gets a foothold could gain higher control over the platform.

CVE-2026-76473 has a CVSS score of 9.8, Critical severity. CVE-2026-76474 has a CVSS score of 9.8, Critical severity. CVE-2026-76475 has a CVSS score of 9.3, Critical severity. CVE-2026-76478 has a CVSS score of 8.8, High severity. CVE-2026-76479 has a CVSS score of 7.8, High severity. Emergency Responder supports emergency call routing and location tracking, so these servers should be patched the same day.

Cisco Emergency Responder has received software hardening releases that fix five vulnerabilities found in an internal Cisco security review. The update closes an injection weakness, an authentication flaw, a cross-site scripting issue, an access control gap, and a path traversal weakness. Three of these flaws allow privilege escalation, so an attacker who gets a foothold could gain higher control over the platform.

CVE-2026-76473 has a CVSS score of 9.8, Critical severity. CVE-2026-76474 has a CVSS score of 9.8, Critical severity. CVE-2026-76475 has a CVSS score of 9.3, Critical severity. CVE-2026-76478 has a CVSS score of 8.8, High severity. CVE-2026-76479 has a CVSS score of 7.8, High severity. Emergency Responder supports emergency call routing and location tracking, so these servers should be patched the same day.

Cisco Emergency Responder has received software hardening releases that fix five vulnerabilities found in an internal Cisco security review. The update closes an injection weakness, an authentication flaw, a cross-site scripting issue, an access control gap, and a path traversal weakness. Three of these flaws allow privilege escalation, so an attacker who gets a foothold could gain higher control over the platform.

CVE-2026-76473 has a CVSS score of 9.8, Critical severity. CVE-2026-76474 has a CVSS score of 9.8, Critical severity. CVE-2026-76475 has a CVSS score of 9.3, Critical severity. CVE-2026-76478 has a CVSS score of 8.8, High severity. CVE-2026-76479 has a CVSS score of 7.8, High severity. Emergency Responder supports emergency call routing and location tracking, so these servers should be patched the same day.

Cisco Emergency Responder has received software hardening releases that fix five vulnerabilities found in an internal Cisco security review. The update closes an injection weakness, an authentication flaw, a cross-site scripting issue, an access control gap, and a path traversal weakness. Three of these flaws allow privilege escalation, so an attacker who gets a foothold could gain higher control over the platform.

CVE-2026-76473 has a CVSS score of 9.8, Critical severity. CVE-2026-76474 has a CVSS score of 9.8, Critical severity. CVE-2026-76475 has a CVSS score of 9.3, Critical severity. CVE-2026-76478 has a CVSS score of 8.8, High severity. CVE-2026-76479 has a CVSS score of 7.8, High severity. Emergency Responder supports emergency call routing and location tracking, so these servers should be patched the same day.

Cisco Emergency Responder has received software hardening releases that fix five vulnerabilities found in an internal Cisco security review. The update closes an injection weakness, an authentication flaw, a cross-site scripting issue, an access control gap, and a path traversal weakness. Three of these flaws allow privilege escalation, so an attacker who gets a foothold could gain higher control over the platform.

CVE-2026-76473 has a CVSS score of 9.8, Critical severity. CVE-2026-76474 has a CVSS score of 9.8, Critical severity. CVE-2026-76475 has a CVSS score of 9.3, Critical severity. CVE-2026-76478 has a CVSS score of 8.8, High severity. CVE-2026-76479 has a CVSS score of 7.8, High severity. Emergency Responder supports emergency call routing and location tracking, so these servers should be patched the same day.

Cisco has released software hardening updates for Cisco TelePresence Video Communication Server (VCS) Expressway, covering Expressway-C and Expressway-E devices. The update fixes six vulnerabilities, led by a Critical flaw in the database service. Persistent cookies and missing client certificate validation in clustering let an unauthenticated remote attacker run operating system commands as root. CVE-2026-76466 has a CVSS score of 9.8, Critical severity.

The remaining five High severity flaws came out of an internal Cisco security review. They cover out-of-bounds writes, null pointer issues, code injection, incorrect permission assignments, and improper link resolution, which open paths to remote code execution and privilege escalation. CVE-2026-76490 has a CVSS score of 8.6, High severity. CVE-2026-76492 has a CVSS score of 7.5, High severity. CVE-2026-76494 has a CVSS score of 7.8, High severity. CVE-2026-76495 has a CVSS score of 7.8, High severity. CVE-2026-76496 has a CVSS score of 7.0, High severity.

Cisco has released software hardening updates for Cisco TelePresence Video Communication Server (VCS) Expressway, covering Expressway-C and Expressway-E devices. The update fixes six vulnerabilities, led by a Critical flaw in the database service. Persistent cookies and missing client certificate validation in clustering let an unauthenticated remote attacker run operating system commands as root. CVE-2026-76466 has a CVSS score of 9.8, Critical severity.

The remaining five High severity flaws came out of an internal Cisco security review. They cover out-of-bounds writes, null pointer issues, code injection, incorrect permission assignments, and improper link resolution, which open paths to remote code execution and privilege escalation. CVE-2026-76490 has a CVSS score of 8.6, High severity. CVE-2026-76492 has a CVSS score of 7.5, High severity. CVE-2026-76494 has a CVSS score of 7.8, High severity. CVE-2026-76495 has a CVSS score of 7.8, High severity. CVE-2026-76496 has a CVSS score of 7.0, High severity.

Cisco has released software hardening updates for Cisco TelePresence Video Communication Server (VCS) Expressway, covering Expressway-C and Expressway-E devices. The update fixes six vulnerabilities, led by a Critical flaw in the database service. Persistent cookies and missing client certificate validation in clustering let an unauthenticated remote attacker run operating system commands as root. CVE-2026-76466 has a CVSS score of 9.8, Critical severity.

The remaining five High severity flaws came out of an internal Cisco security review. They cover out-of-bounds writes, null pointer issues, code injection, incorrect permission assignments, and improper link resolution, which open paths to remote code execution and privilege escalation. CVE-2026-76490 has a CVSS score of 8.6, High severity. CVE-2026-76492 has a CVSS score of 7.5, High severity. CVE-2026-76494 has a CVSS score of 7.8, High severity. CVE-2026-76495 has a CVSS score of 7.8, High severity. CVE-2026-76496 has a CVSS score of 7.0, High severity.

Cisco has released software hardening updates for Cisco TelePresence Video Communication Server (VCS) Expressway, covering Expressway-C and Expressway-E devices. The update fixes six vulnerabilities, led by a Critical flaw in the database service. Persistent cookies and missing client certificate validation in clustering let an unauthenticated remote attacker run operating system commands as root. CVE-2026-76466 has a CVSS score of 9.8, Critical severity.

The remaining five High severity flaws came out of an internal Cisco security review. They cover out-of-bounds writes, null pointer issues, code injection, incorrect permission assignments, and improper link resolution, which open paths to remote code execution and privilege escalation. CVE-2026-76490 has a CVSS score of 8.6, High severity. CVE-2026-76492 has a CVSS score of 7.5, High severity. CVE-2026-76494 has a CVSS score of 7.8, High severity. CVE-2026-76495 has a CVSS score of 7.8, High severity. CVE-2026-76496 has a CVSS score of 7.0, High severity.

Cisco has released software hardening updates for Cisco TelePresence Video Communication Server (VCS) Expressway, covering Expressway-C and Expressway-E devices. The update fixes six vulnerabilities, led by a Critical flaw in the database service. Persistent cookies and missing client certificate validation in clustering let an unauthenticated remote attacker run operating system commands as root. CVE-2026-76466 has a CVSS score of 9.8, Critical severity.

The remaining five High severity flaws came out of an internal Cisco security review. They cover out-of-bounds writes, null pointer issues, code injection, incorrect permission assignments, and improper link resolution, which open paths to remote code execution and privilege escalation. CVE-2026-76490 has a CVSS score of 8.6, High severity. CVE-2026-76492 has a CVSS score of 7.5, High severity. CVE-2026-76494 has a CVSS score of 7.8, High severity. CVE-2026-76495 has a CVSS score of 7.8, High severity. CVE-2026-76496 has a CVSS score of 7.0, High severity.

Cisco has released software hardening updates for Cisco TelePresence Video Communication Server (VCS) Expressway, covering Expressway-C and Expressway-E devices. The update fixes six vulnerabilities, led by a Critical flaw in the database service. Persistent cookies and missing client certificate validation in clustering let an unauthenticated remote attacker run operating system commands as root. CVE-2026-76466 has a CVSS score of 9.8, Critical severity.

The remaining five High severity flaws came out of an internal Cisco security review. They cover out-of-bounds writes, null pointer issues, code injection, incorrect permission assignments, and improper link resolution, which open paths to remote code execution and privilege escalation. CVE-2026-76490 has a CVSS score of 8.6, High severity. CVE-2026-76492 has a CVSS score of 7.5, High severity. CVE-2026-76494 has a CVSS score of 7.8, High severity. CVE-2026-76495 has a CVSS score of 7.8, High severity. CVE-2026-76496 has a CVSS score of 7.0, High severity.

Commvault Cloud has a critical input validation flaw in CVFS that affects command execution. CVE-2026-77099 has a CVSS score of 9.3, Critical severity. Commvault has fixed the issue in a maintenance release. Upgrade to the resolved maintenance release and update CVFS to close this exposure.

Eptura Archibus has two vulnerabilities that attackers can chain into unauthenticated code execution on the server. CVE-2026-107186 has a CVSS score of 8.6, High severity. It is an authentication bypass that lets an unauthenticated user send a crafted DWR request and run workflow rules without logging in. CVE-2026-107188 has a CVSS score of 9.6, Critical severity. It is an unrestricted file upload flaw that lets a user upload JSP code as a JSPX export report and then run commands by browsing to the file.

Used together, these flaws give an attacker with no credentials remote code execution on the Archibus server. That puts facility, real estate, and workplace data and connected business systems at risk. Patch both CVEs on the same day.

Eptura Archibus has two vulnerabilities that attackers can chain into unauthenticated code execution on the server. CVE-2026-107186 has a CVSS score of 8.6, High severity. It is an authentication bypass that lets an unauthenticated user send a crafted DWR request and run workflow rules without logging in. CVE-2026-107188 has a CVSS score of 9.6, Critical severity. It is an unrestricted file upload flaw that lets a user upload JSP code as a JSPX export report and then run commands by browsing to the file.

Used together, these flaws give an attacker with no credentials remote code execution on the Archibus server. That puts facility, real estate, and workplace data and connected business systems at risk. Patch both CVEs on the same day.

Esri Portal for ArcGIS has a critical authentication flaw that lets unauthenticated attackers reach certain Portal Administrator API endpoints under specific conditions. CVE-2026-69227 has a CVSS score of 9.8, Critical severity. The flaw stems from missing authentication for a critical function (CWE-306). It gives an outside attacker administrative functionality without credentials, which is an elevation of privilege.

This update closes the gap and restores authentication on the affected administrator endpoints. Portal for ArcGIS often holds an organization's geospatial data, user accounts, and sharing controls, so an attacker with admin-level access could change settings, alter content, or manage users. Apply this patch on a same-day basis.

Fortinet FortiSIEM 7.5.0 has a path traversal flaw that lets an attacker execute unauthorized code or commands with specially crafted packets. The flaw is classified as an elevation of privilege risk. CVE-2026-106173 has a CVSS score of 9.4, Critical severity.

Proof-of-concept code is public for CVE-2026-106173, which lowers the bar for attackers to weaponize it. FortiSIEM collects security data from across the network, so a compromised instance gives an attacker a foothold in the system meant to detect them. Patch it the same day.

This FreeBSD update fixes eight vulnerabilities across jail isolation, the TCP RACK stack, the bhyve hypervisor, and kernel IPC and kqueue handling. The most serious is CVE-2026-101306, which has a CVSS score of 9.8, Critical severity. It lets a jailed process clear a directory descriptor's restriction by passing it to itself over a Unix domain socket and escape the jail's filesystem root. CVE-2026-101307 has a CVSS score of 8.2, High severity. A remote attacker with a TCP connection to a system using the RACK stack can trigger a roughly 512 KB out-of-bounds write in the kernel heap, which may crash the kernel.

Three bhyve flaws in the xHCI, HDA audio, and framebuffer device models let a malicious guest crash the bhyve process or potentially run code in host userspace, within bhyve's Capsicum sandbox. CVE-2026-101309, CVE-2026-101310, and CVE-2026-101311 each have a CVSS score of 7.0, High severity. Three local kernel flaws let unprivileged users escalate privileges. CVE-2026-58098, a semaphore sequence-number wraparound in semop(2), has a CVSS score of 8.4, High severity. CVE-2026-58099 and CVE-2026-58100, race conditions in kqueue fork handling, each have a CVSS score of 7.0, High severity.

This FreeBSD update fixes eight vulnerabilities across jail isolation, the TCP RACK stack, the bhyve hypervisor, and kernel IPC and kqueue handling. The most serious is CVE-2026-101306, which has a CVSS score of 9.8, Critical severity. It lets a jailed process clear a directory descriptor's restriction by passing it to itself over a Unix domain socket and escape the jail's filesystem root. CVE-2026-101307 has a CVSS score of 8.2, High severity. A remote attacker with a TCP connection to a system using the RACK stack can trigger a roughly 512 KB out-of-bounds write in the kernel heap, which may crash the kernel.

Three bhyve flaws in the xHCI, HDA audio, and framebuffer device models let a malicious guest crash the bhyve process or potentially run code in host userspace, within bhyve's Capsicum sandbox. CVE-2026-101309, CVE-2026-101310, and CVE-2026-101311 each have a CVSS score of 7.0, High severity. Three local kernel flaws let unprivileged users escalate privileges. CVE-2026-58098, a semaphore sequence-number wraparound in semop(2), has a CVSS score of 8.4, High severity. CVE-2026-58099 and CVE-2026-58100, race conditions in kqueue fork handling, each have a CVSS score of 7.0, High severity.

This FreeBSD update fixes eight vulnerabilities across jail isolation, the TCP RACK stack, the bhyve hypervisor, and kernel IPC and kqueue handling. The most serious is CVE-2026-101306, which has a CVSS score of 9.8, Critical severity. It lets a jailed process clear a directory descriptor's restriction by passing it to itself over a Unix domain socket and escape the jail's filesystem root. CVE-2026-101307 has a CVSS score of 8.2, High severity. A remote attacker with a TCP connection to a system using the RACK stack can trigger a roughly 512 KB out-of-bounds write in the kernel heap, which may crash the kernel.

Three bhyve flaws in the xHCI, HDA audio, and framebuffer device models let a malicious guest crash the bhyve process or potentially run code in host userspace, within bhyve's Capsicum sandbox. CVE-2026-101309, CVE-2026-101310, and CVE-2026-101311 each have a CVSS score of 7.0, High severity. Three local kernel flaws let unprivileged users escalate privileges. CVE-2026-58098, a semaphore sequence-number wraparound in semop(2), has a CVSS score of 8.4, High severity. CVE-2026-58099 and CVE-2026-58100, race conditions in kqueue fork handling, each have a CVSS score of 7.0, High severity.

This FreeBSD update fixes eight vulnerabilities across jail isolation, the TCP RACK stack, the bhyve hypervisor, and kernel IPC and kqueue handling. The most serious is CVE-2026-101306, which has a CVSS score of 9.8, Critical severity. It lets a jailed process clear a directory descriptor's restriction by passing it to itself over a Unix domain socket and escape the jail's filesystem root. CVE-2026-101307 has a CVSS score of 8.2, High severity. A remote attacker with a TCP connection to a system using the RACK stack can trigger a roughly 512 KB out-of-bounds write in the kernel heap, which may crash the kernel.

Three bhyve flaws in the xHCI, HDA audio, and framebuffer device models let a malicious guest crash the bhyve process or potentially run code in host userspace, within bhyve's Capsicum sandbox. CVE-2026-101309, CVE-2026-101310, and CVE-2026-101311 each have a CVSS score of 7.0, High severity. Three local kernel flaws let unprivileged users escalate privileges. CVE-2026-58098, a semaphore sequence-number wraparound in semop(2), has a CVSS score of 8.4, High severity. CVE-2026-58099 and CVE-2026-58100, race conditions in kqueue fork handling, each have a CVSS score of 7.0, High severity.

This FreeBSD update fixes eight vulnerabilities across jail isolation, the TCP RACK stack, the bhyve hypervisor, and kernel IPC and kqueue handling. The most serious is CVE-2026-101306, which has a CVSS score of 9.8, Critical severity. It lets a jailed process clear a directory descriptor's restriction by passing it to itself over a Unix domain socket and escape the jail's filesystem root. CVE-2026-101307 has a CVSS score of 8.2, High severity. A remote attacker with a TCP connection to a system using the RACK stack can trigger a roughly 512 KB out-of-bounds write in the kernel heap, which may crash the kernel.

Three bhyve flaws in the xHCI, HDA audio, and framebuffer device models let a malicious guest crash the bhyve process or potentially run code in host userspace, within bhyve's Capsicum sandbox. CVE-2026-101309, CVE-2026-101310, and CVE-2026-101311 each have a CVSS score of 7.0, High severity. Three local kernel flaws let unprivileged users escalate privileges. CVE-2026-58098, a semaphore sequence-number wraparound in semop(2), has a CVSS score of 8.4, High severity. CVE-2026-58099 and CVE-2026-58100, race conditions in kqueue fork handling, each have a CVSS score of 7.0, High severity.

This FreeBSD update fixes eight vulnerabilities across jail isolation, the TCP RACK stack, the bhyve hypervisor, and kernel IPC and kqueue handling. The most serious is CVE-2026-101306, which has a CVSS score of 9.8, Critical severity. It lets a jailed process clear a directory descriptor's restriction by passing it to itself over a Unix domain socket and escape the jail's filesystem root. CVE-2026-101307 has a CVSS score of 8.2, High severity. A remote attacker with a TCP connection to a system using the RACK stack can trigger a roughly 512 KB out-of-bounds write in the kernel heap, which may crash the kernel.

Three bhyve flaws in the xHCI, HDA audio, and framebuffer device models let a malicious guest crash the bhyve process or potentially run code in host userspace, within bhyve's Capsicum sandbox. CVE-2026-101309, CVE-2026-101310, and CVE-2026-101311 each have a CVSS score of 7.0, High severity. Three local kernel flaws let unprivileged users escalate privileges. CVE-2026-58098, a semaphore sequence-number wraparound in semop(2), has a CVSS score of 8.4, High severity. CVE-2026-58099 and CVE-2026-58100, race conditions in kqueue fork handling, each have a CVSS score of 7.0, High severity.

This FreeBSD update fixes eight vulnerabilities across jail isolation, the TCP RACK stack, the bhyve hypervisor, and kernel IPC and kqueue handling. The most serious is CVE-2026-101306, which has a CVSS score of 9.8, Critical severity. It lets a jailed process clear a directory descriptor's restriction by passing it to itself over a Unix domain socket and escape the jail's filesystem root. CVE-2026-101307 has a CVSS score of 8.2, High severity. A remote attacker with a TCP connection to a system using the RACK stack can trigger a roughly 512 KB out-of-bounds write in the kernel heap, which may crash the kernel.

Three bhyve flaws in the xHCI, HDA audio, and framebuffer device models let a malicious guest crash the bhyve process or potentially run code in host userspace, within bhyve's Capsicum sandbox. CVE-2026-101309, CVE-2026-101310, and CVE-2026-101311 each have a CVSS score of 7.0, High severity. Three local kernel flaws let unprivileged users escalate privileges. CVE-2026-58098, a semaphore sequence-number wraparound in semop(2), has a CVSS score of 8.4, High severity. CVE-2026-58099 and CVE-2026-58100, race conditions in kqueue fork handling, each have a CVSS score of 7.0, High severity.

This FreeBSD update fixes eight vulnerabilities across jail isolation, the TCP RACK stack, the bhyve hypervisor, and kernel IPC and kqueue handling. The most serious is CVE-2026-101306, which has a CVSS score of 9.8, Critical severity. It lets a jailed process clear a directory descriptor's restriction by passing it to itself over a Unix domain socket and escape the jail's filesystem root. CVE-2026-101307 has a CVSS score of 8.2, High severity. A remote attacker with a TCP connection to a system using the RACK stack can trigger a roughly 512 KB out-of-bounds write in the kernel heap, which may crash the kernel.

Three bhyve flaws in the xHCI, HDA audio, and framebuffer device models let a malicious guest crash the bhyve process or potentially run code in host userspace, within bhyve's Capsicum sandbox. CVE-2026-101309, CVE-2026-101310, and CVE-2026-101311 each have a CVSS score of 7.0, High severity. Three local kernel flaws let unprivileged users escalate privileges. CVE-2026-58098, a semaphore sequence-number wraparound in semop(2), has a CVSS score of 8.4, High severity. CVE-2026-58099 and CVE-2026-58100, race conditions in kqueue fork handling, each have a CVSS score of 7.0, High severity.

GitLab has released security updates for GitLab CE/EE that fix four vulnerabilities, including two Critical flaws that let unauthenticated attackers execute arbitrary code on the GitLab server. Attackers are actively exploiting CVE-2026-97229, which abuses a specially crafted regular expression in a CI/CD configuration to gain code execution. CVE-2026-97229 has a CVSS score of 10.0, Critical severity. CVE-2026-110264 has a CVSS score of 10.0, Critical severity, and achieves the same unauthenticated code execution through an integer overflow when GitLab compiles a crafted regular expression.

The update also closes two High severity authorization flaws in CI/CD pipelines. CVE-2026-16301 has a CVSS score of 8.5, High severity, and lets an authenticated user with the Developer role run pipelines on protected branches without authorization. CVE-2026-81839 has a CVSS score of 7.7, High severity, and lets an authenticated user in GitLab EE run arbitrary pipelines in a transferred project with the new group's privileges. With active exploitation underway and the server at the center of the build and release process, this update demands immediate deployment.

GitLab has released security updates for GitLab CE/EE that fix four vulnerabilities, including two Critical flaws that let unauthenticated attackers execute arbitrary code on the GitLab server. Attackers are actively exploiting CVE-2026-97229, which abuses a specially crafted regular expression in a CI/CD configuration to gain code execution. CVE-2026-97229 has a CVSS score of 10.0, Critical severity. CVE-2026-110264 has a CVSS score of 10.0, Critical severity, and achieves the same unauthenticated code execution through an integer overflow when GitLab compiles a crafted regular expression.

The update also closes two High severity authorization flaws in CI/CD pipelines. CVE-2026-16301 has a CVSS score of 8.5, High severity, and lets an authenticated user with the Developer role run pipelines on protected branches without authorization. CVE-2026-81839 has a CVSS score of 7.7, High severity, and lets an authenticated user in GitLab EE run arbitrary pipelines in a transferred project with the new group's privileges. With active exploitation underway and the server at the center of the build and release process, this update demands immediate deployment.

GitLab has released security updates for GitLab CE/EE that fix four vulnerabilities, including two Critical flaws that let unauthenticated attackers execute arbitrary code on the GitLab server. Attackers are actively exploiting CVE-2026-97229, which abuses a specially crafted regular expression in a CI/CD configuration to gain code execution. CVE-2026-97229 has a CVSS score of 10.0, Critical severity. CVE-2026-110264 has a CVSS score of 10.0, Critical severity, and achieves the same unauthenticated code execution through an integer overflow when GitLab compiles a crafted regular expression.

The update also closes two High severity authorization flaws in CI/CD pipelines. CVE-2026-16301 has a CVSS score of 8.5, High severity, and lets an authenticated user with the Developer role run pipelines on protected branches without authorization. CVE-2026-81839 has a CVSS score of 7.7, High severity, and lets an authenticated user in GitLab EE run arbitrary pipelines in a transferred project with the new group's privileges. With active exploitation underway and the server at the center of the build and release process, this update demands immediate deployment.

GitLab has released security updates for GitLab CE/EE that fix four vulnerabilities, including two Critical flaws that let unauthenticated attackers execute arbitrary code on the GitLab server. Attackers are actively exploiting CVE-2026-97229, which abuses a specially crafted regular expression in a CI/CD configuration to gain code execution. CVE-2026-97229 has a CVSS score of 10.0, Critical severity. CVE-2026-110264 has a CVSS score of 10.0, Critical severity, and achieves the same unauthenticated code execution through an integer overflow when GitLab compiles a crafted regular expression.

The update also closes two High severity authorization flaws in CI/CD pipelines. CVE-2026-16301 has a CVSS score of 8.5, High severity, and lets an authenticated user with the Developer role run pipelines on protected branches without authorization. CVE-2026-81839 has a CVSS score of 7.7, High severity, and lets an authenticated user in GitLab EE run arbitrary pipelines in a transferred project with the new group's privileges. With active exploitation underway and the server at the center of the build and release process, this update demands immediate deployment.

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 contain a critical flaw that lets a remote attacker obtain sensitive information. The product binds to an unrestricted IP address, so services meant for limited access can be reached from any network the host is on. CVE-2026-92559 has a CVSS score of 9.8, Critical severity.

App Connect Enterprise sits at the center of how business systems exchange data, so information exposed here can include the sensitive traffic those systems carry. Organizations running affected versions should apply the update to close the exposure and restrict network access to the integration layer.

This IBM i update fixes two serious vulnerabilities in versions 7.3, 7.4, 7.5, and 7.6. CVE-2026-96119 has a CVSS score of 9.9, Critical severity. Poor data sanitization in the HTTP Server Administration web application lets a remote authenticated attacker run arbitrary code or steal sensitive information. CVE-2026-102917 has a CVSS score of 7.8, High severity. It lets an authenticated attacker raise their privileges and act with QSECOFR/root authority.

Together, these flaws let an attacker go from a foothold to full control of IBM i systems that run core business workloads. Apply the update the same day.

This IBM i update fixes two serious vulnerabilities in versions 7.3, 7.4, 7.5, and 7.6. CVE-2026-96119 has a CVSS score of 9.9, Critical severity. Poor data sanitization in the HTTP Server Administration web application lets a remote authenticated attacker run arbitrary code or steal sensitive information. CVE-2026-102917 has a CVSS score of 7.8, High severity. It lets an authenticated attacker raise their privileges and act with QSECOFR/root authority.

Together, these flaws let an attacker go from a foothold to full control of IBM i systems that run core business workloads. Apply the update the same day.

IBM WebSphere Application Server - Liberty has five security flaws that weaken authentication and access control across the application tier. Two Critical flaws stand out. CVE-2026-93909 has a CVSS score of 9.1, Critical severity, and lets attackers bypass authentication when the samlWeb-2.0 feature is enabled. CVE-2026-93895 has a CVSS score of 9.1, Critical severity, and lets an unauthenticated remote attacker bypass access controls on gRPC service methods.

The update also fixes three High severity flaws. CVE-2026-93905 has a CVSS score of 8.2, High severity, and lets an unauthenticated remote attacker corrupt the saved status of batch jobs; it carries remote code execution risk. CVE-2026-105443 has a CVSS score of 8.2, High severity, and comes from weak isolation between servers that share an install. CVE-2026-95695 has a CVSS score of 7.4, High severity, and lets a remote attacker bypass security restrictions through incorrect authorization. Four of the five flaws allow privilege escalation, so applying the update on the same day closes several paths to unauthorized access.

IBM WebSphere Application Server - Liberty has five security flaws that weaken authentication and access control across the application tier. Two Critical flaws stand out. CVE-2026-93909 has a CVSS score of 9.1, Critical severity, and lets attackers bypass authentication when the samlWeb-2.0 feature is enabled. CVE-2026-93895 has a CVSS score of 9.1, Critical severity, and lets an unauthenticated remote attacker bypass access controls on gRPC service methods.

The update also fixes three High severity flaws. CVE-2026-93905 has a CVSS score of 8.2, High severity, and lets an unauthenticated remote attacker corrupt the saved status of batch jobs; it carries remote code execution risk. CVE-2026-105443 has a CVSS score of 8.2, High severity, and comes from weak isolation between servers that share an install. CVE-2026-95695 has a CVSS score of 7.4, High severity, and lets a remote attacker bypass security restrictions through incorrect authorization. Four of the five flaws allow privilege escalation, so applying the update on the same day closes several paths to unauthorized access.

IBM WebSphere Application Server - Liberty has five security flaws that weaken authentication and access control across the application tier. Two Critical flaws stand out. CVE-2026-93909 has a CVSS score of 9.1, Critical severity, and lets attackers bypass authentication when the samlWeb-2.0 feature is enabled. CVE-2026-93895 has a CVSS score of 9.1, Critical severity, and lets an unauthenticated remote attacker bypass access controls on gRPC service methods.

The update also fixes three High severity flaws. CVE-2026-93905 has a CVSS score of 8.2, High severity, and lets an unauthenticated remote attacker corrupt the saved status of batch jobs; it carries remote code execution risk. CVE-2026-105443 has a CVSS score of 8.2, High severity, and comes from weak isolation between servers that share an install. CVE-2026-95695 has a CVSS score of 7.4, High severity, and lets a remote attacker bypass security restrictions through incorrect authorization. Four of the five flaws allow privilege escalation, so applying the update on the same day closes several paths to unauthorized access.

IBM WebSphere Application Server - Liberty has five security flaws that weaken authentication and access control across the application tier. Two Critical flaws stand out. CVE-2026-93909 has a CVSS score of 9.1, Critical severity, and lets attackers bypass authentication when the samlWeb-2.0 feature is enabled. CVE-2026-93895 has a CVSS score of 9.1, Critical severity, and lets an unauthenticated remote attacker bypass access controls on gRPC service methods.

The update also fixes three High severity flaws. CVE-2026-93905 has a CVSS score of 8.2, High severity, and lets an unauthenticated remote attacker corrupt the saved status of batch jobs; it carries remote code execution risk. CVE-2026-105443 has a CVSS score of 8.2, High severity, and comes from weak isolation between servers that share an install. CVE-2026-95695 has a CVSS score of 7.4, High severity, and lets a remote attacker bypass security restrictions through incorrect authorization. Four of the five flaws allow privilege escalation, so applying the update on the same day closes several paths to unauthorized access.

IBM WebSphere Application Server - Liberty has five security flaws that weaken authentication and access control across the application tier. Two Critical flaws stand out. CVE-2026-93909 has a CVSS score of 9.1, Critical severity, and lets attackers bypass authentication when the samlWeb-2.0 feature is enabled. CVE-2026-93895 has a CVSS score of 9.1, Critical severity, and lets an unauthenticated remote attacker bypass access controls on gRPC service methods.

The update also fixes three High severity flaws. CVE-2026-93905 has a CVSS score of 8.2, High severity, and lets an unauthenticated remote attacker corrupt the saved status of batch jobs; it carries remote code execution risk. CVE-2026-105443 has a CVSS score of 8.2, High severity, and comes from weak isolation between servers that share an install. CVE-2026-95695 has a CVSS score of 7.4, High severity, and lets a remote attacker bypass security restrictions through incorrect authorization. Four of the five flaws allow privilege escalation, so applying the update on the same day closes several paths to unauthorized access.

This Juniper Junos OS Evolved update closes four flaws that give attackers root-level control of core network devices or knock them offline. CVE-2026-102031 has a CVSS score of 9.8, Critical severity: OS command injection in TACACS lets a low-privileged TACACS+-authenticated user run commands as root when periodic TACACS+ authorization refresh is enabled. CVE-2026-101967 and CVE-2026-101978 each have a CVSS score of 8.8, High severity. Both are OS command injection flaws in the bootzd zero-touch provisioning daemon that let an unauthenticated attacker on the management LAN run commands as root. One uses a crafted DHCP response, and the other uses a crafted gRPC response on PTX Series.

CVE-2026-102068 has a CVSS score of 7.5, High severity: a stack-based buffer overflow in the kernel lets an unauthenticated remote attacker trigger a kernel panic with a crafted TCP packet when key-chain authentication is used for BGP or LDP. Together, these flaws put routing integrity and network availability at direct risk.

This Juniper Junos OS Evolved update closes four flaws that give attackers root-level control of core network devices or knock them offline. CVE-2026-102031 has a CVSS score of 9.8, Critical severity: OS command injection in TACACS lets a low-privileged TACACS+-authenticated user run commands as root when periodic TACACS+ authorization refresh is enabled. CVE-2026-101967 and CVE-2026-101978 each have a CVSS score of 8.8, High severity. Both are OS command injection flaws in the bootzd zero-touch provisioning daemon that let an unauthenticated attacker on the management LAN run commands as root. One uses a crafted DHCP response, and the other uses a crafted gRPC response on PTX Series.

CVE-2026-102068 has a CVSS score of 7.5, High severity: a stack-based buffer overflow in the kernel lets an unauthenticated remote attacker trigger a kernel panic with a crafted TCP packet when key-chain authentication is used for BGP or LDP. Together, these flaws put routing integrity and network availability at direct risk.

This Juniper Junos OS Evolved update closes four flaws that give attackers root-level control of core network devices or knock them offline. CVE-2026-102031 has a CVSS score of 9.8, Critical severity: OS command injection in TACACS lets a low-privileged TACACS+-authenticated user run commands as root when periodic TACACS+ authorization refresh is enabled. CVE-2026-101967 and CVE-2026-101978 each have a CVSS score of 8.8, High severity. Both are OS command injection flaws in the bootzd zero-touch provisioning daemon that let an unauthenticated attacker on the management LAN run commands as root. One uses a crafted DHCP response, and the other uses a crafted gRPC response on PTX Series.

CVE-2026-102068 has a CVSS score of 7.5, High severity: a stack-based buffer overflow in the kernel lets an unauthenticated remote attacker trigger a kernel panic with a crafted TCP packet when key-chain authentication is used for BGP or LDP. Together, these flaws put routing integrity and network availability at direct risk.

This Juniper Junos OS Evolved update closes four flaws that give attackers root-level control of core network devices or knock them offline. CVE-2026-102031 has a CVSS score of 9.8, Critical severity: OS command injection in TACACS lets a low-privileged TACACS+-authenticated user run commands as root when periodic TACACS+ authorization refresh is enabled. CVE-2026-101967 and CVE-2026-101978 each have a CVSS score of 8.8, High severity. Both are OS command injection flaws in the bootzd zero-touch provisioning daemon that let an unauthenticated attacker on the management LAN run commands as root. One uses a crafted DHCP response, and the other uses a crafted gRPC response on PTX Series.

CVE-2026-102068 has a CVSS score of 7.5, High severity: a stack-based buffer overflow in the kernel lets an unauthenticated remote attacker trigger a kernel panic with a crafted TCP packet when key-chain authentication is used for BGP or LDP. Together, these flaws put routing integrity and network availability at direct risk.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

This Juniper Junos OS update fixes 56 vulnerabilities across Junos OS and Junos OS Evolved, 14 of them Critical. The most severe flaws let unauthenticated attackers bypass J-Web authentication and run commands as root. Others let them trigger stack and heap buffer overflows in the routing protocol daemon, IKE key management, GRE tunnel processing, and service-deployment components, which can give an attacker full control of the device. Dozens more flaws let BGP, EVPN, LDP, LLDP, DHCP, and CFM traffic crash core routing and Layer 2 daemons, which can take down routing adjacencies and disrupt network availability across the enterprise.

CVE-2026-101950, CVE-2026-101954, CVE-2026-101956, CVE-2026-101980, CVE-2026-101982, CVE-2026-101983, CVE-2026-101986, CVE-2026-101990, CVE-2026-102175, CVE-2026-102178, CVE-2026-102182, CVE-2026-33789, CVE-2026-33792, and CVE-2026-33796 each have a CVSS score of 9.8, Critical severity. CVE-2026-101979, CVE-2026-101981, CVE-2026-102014, CVE-2026-102015, CVE-2026-102049, CVE-2026-102050, CVE-2026-102052, CVE-2026-102055, CVE-2026-102059, CVE-2026-102061, CVE-2026-102069, CVE-2026-102174, CVE-2026-102176, CVE-2026-103994, and CVE-2026-33798 each have a CVSS score of 8.8, High severity. CVE-2026-101955 has a CVSS score of 8.1, High severity. CVE-2026-101927 and CVE-2026-102079 each have a CVSS score of 7.8, High severity. CVE-2026-102177 has a CVSS score of 7.6, High severity. CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101944, CVE-2026-101945, CVE-2026-101948, CVE-2026-101949, CVE-2026-101961, CVE-2026-101973, CVE-2026-101976, CVE-2026-101977, CVE-2026-102016, CVE-2026-102024, CVE-2026-102028, CVE-2026-102029, CVE-2026-102036, CVE-2026-102057, CVE-2026-102065, CVE-2026-102179, CVE-2026-102180, CVE-2026-102183, and CVE-2026-102184 each have a CVSS score of 7.5, High severity. CVE-2026-102056 has a CVSS score of 7.1, High severity.

• Many flaws let a single malformed routing update crash the routing daemon and drop network adjacencies.
• Restrict J-Web access and patch internet-facing SRX and MX devices first.

MariaDB server has eight vulnerabilities that let authenticated, low-privileged database users corrupt memory, reach table files they should not see, hijack other accounts, and in several cases run code on the server. Three are Critical: CVE-2026-85746, CVE-2026-85748, and CVE-2026-92262 each have a CVSS score of 9.9, Critical severity. They cover an out-of-bounds write in ST_AsText when it handles deeply nested GeometryCollections, a use-after-free in SYS_REFCURSOR handling, and a #mysql50# prefix that bypasses table-name filesystem encoding and can lead to data theft, corruption, or remote code execution.

The other five are High severity. CVE-2026-102523 has a CVSS score of 8.0, High severity. It lets ALTER TABLE ... CONVERT ... PARTITION reach table files the user is not authorized to access. CVE-2026-107814 (CVSS 8.4, High severity) and CVE-2026-107818 (CVSS 8.4, High severity) let users with the FILE privilege plant startup files or inject environment values into the restarted service. CVE-2026-107815 has a CVSS score of 8.5, High severity, and is a stack out-of-bounds write in the CONNECT engine's DOS table type. CVE-2026-97380 has a CVSS score of 8.8, High severity, and lets a GRANT PROXY authorization error reset another account's password. The update fixes all eight in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

MariaDB server has eight vulnerabilities that let authenticated, low-privileged database users corrupt memory, reach table files they should not see, hijack other accounts, and in several cases run code on the server. Three are Critical: CVE-2026-85746, CVE-2026-85748, and CVE-2026-92262 each have a CVSS score of 9.9, Critical severity. They cover an out-of-bounds write in ST_AsText when it handles deeply nested GeometryCollections, a use-after-free in SYS_REFCURSOR handling, and a #mysql50# prefix that bypasses table-name filesystem encoding and can lead to data theft, corruption, or remote code execution.

The other five are High severity. CVE-2026-102523 has a CVSS score of 8.0, High severity. It lets ALTER TABLE ... CONVERT ... PARTITION reach table files the user is not authorized to access. CVE-2026-107814 (CVSS 8.4, High severity) and CVE-2026-107818 (CVSS 8.4, High severity) let users with the FILE privilege plant startup files or inject environment values into the restarted service. CVE-2026-107815 has a CVSS score of 8.5, High severity, and is a stack out-of-bounds write in the CONNECT engine's DOS table type. CVE-2026-97380 has a CVSS score of 8.8, High severity, and lets a GRANT PROXY authorization error reset another account's password. The update fixes all eight in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

MariaDB server has eight vulnerabilities that let authenticated, low-privileged database users corrupt memory, reach table files they should not see, hijack other accounts, and in several cases run code on the server. Three are Critical: CVE-2026-85746, CVE-2026-85748, and CVE-2026-92262 each have a CVSS score of 9.9, Critical severity. They cover an out-of-bounds write in ST_AsText when it handles deeply nested GeometryCollections, a use-after-free in SYS_REFCURSOR handling, and a #mysql50# prefix that bypasses table-name filesystem encoding and can lead to data theft, corruption, or remote code execution.

The other five are High severity. CVE-2026-102523 has a CVSS score of 8.0, High severity. It lets ALTER TABLE ... CONVERT ... PARTITION reach table files the user is not authorized to access. CVE-2026-107814 (CVSS 8.4, High severity) and CVE-2026-107818 (CVSS 8.4, High severity) let users with the FILE privilege plant startup files or inject environment values into the restarted service. CVE-2026-107815 has a CVSS score of 8.5, High severity, and is a stack out-of-bounds write in the CONNECT engine's DOS table type. CVE-2026-97380 has a CVSS score of 8.8, High severity, and lets a GRANT PROXY authorization error reset another account's password. The update fixes all eight in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

MariaDB server has eight vulnerabilities that let authenticated, low-privileged database users corrupt memory, reach table files they should not see, hijack other accounts, and in several cases run code on the server. Three are Critical: CVE-2026-85746, CVE-2026-85748, and CVE-2026-92262 each have a CVSS score of 9.9, Critical severity. They cover an out-of-bounds write in ST_AsText when it handles deeply nested GeometryCollections, a use-after-free in SYS_REFCURSOR handling, and a #mysql50# prefix that bypasses table-name filesystem encoding and can lead to data theft, corruption, or remote code execution.

The other five are High severity. CVE-2026-102523 has a CVSS score of 8.0, High severity. It lets ALTER TABLE ... CONVERT ... PARTITION reach table files the user is not authorized to access. CVE-2026-107814 (CVSS 8.4, High severity) and CVE-2026-107818 (CVSS 8.4, High severity) let users with the FILE privilege plant startup files or inject environment values into the restarted service. CVE-2026-107815 has a CVSS score of 8.5, High severity, and is a stack out-of-bounds write in the CONNECT engine's DOS table type. CVE-2026-97380 has a CVSS score of 8.8, High severity, and lets a GRANT PROXY authorization error reset another account's password. The update fixes all eight in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

MariaDB server has eight vulnerabilities that let authenticated, low-privileged database users corrupt memory, reach table files they should not see, hijack other accounts, and in several cases run code on the server. Three are Critical: CVE-2026-85746, CVE-2026-85748, and CVE-2026-92262 each have a CVSS score of 9.9, Critical severity. They cover an out-of-bounds write in ST_AsText when it handles deeply nested GeometryCollections, a use-after-free in SYS_REFCURSOR handling, and a #mysql50# prefix that bypasses table-name filesystem encoding and can lead to data theft, corruption, or remote code execution.

The other five are High severity. CVE-2026-102523 has a CVSS score of 8.0, High severity. It lets ALTER TABLE ... CONVERT ... PARTITION reach table files the user is not authorized to access. CVE-2026-107814 (CVSS 8.4, High severity) and CVE-2026-107818 (CVSS 8.4, High severity) let users with the FILE privilege plant startup files or inject environment values into the restarted service. CVE-2026-107815 has a CVSS score of 8.5, High severity, and is a stack out-of-bounds write in the CONNECT engine's DOS table type. CVE-2026-97380 has a CVSS score of 8.8, High severity, and lets a GRANT PROXY authorization error reset another account's password. The update fixes all eight in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

MariaDB server has eight vulnerabilities that let authenticated, low-privileged database users corrupt memory, reach table files they should not see, hijack other accounts, and in several cases run code on the server. Three are Critical: CVE-2026-85746, CVE-2026-85748, and CVE-2026-92262 each have a CVSS score of 9.9, Critical severity. They cover an out-of-bounds write in ST_AsText when it handles deeply nested GeometryCollections, a use-after-free in SYS_REFCURSOR handling, and a #mysql50# prefix that bypasses table-name filesystem encoding and can lead to data theft, corruption, or remote code execution.

The other five are High severity. CVE-2026-102523 has a CVSS score of 8.0, High severity. It lets ALTER TABLE ... CONVERT ... PARTITION reach table files the user is not authorized to access. CVE-2026-107814 (CVSS 8.4, High severity) and CVE-2026-107818 (CVSS 8.4, High severity) let users with the FILE privilege plant startup files or inject environment values into the restarted service. CVE-2026-107815 has a CVSS score of 8.5, High severity, and is a stack out-of-bounds write in the CONNECT engine's DOS table type. CVE-2026-97380 has a CVSS score of 8.8, High severity, and lets a GRANT PROXY authorization error reset another account's password. The update fixes all eight in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

MariaDB server has eight vulnerabilities that let authenticated, low-privileged database users corrupt memory, reach table files they should not see, hijack other accounts, and in several cases run code on the server. Three are Critical: CVE-2026-85746, CVE-2026-85748, and CVE-2026-92262 each have a CVSS score of 9.9, Critical severity. They cover an out-of-bounds write in ST_AsText when it handles deeply nested GeometryCollections, a use-after-free in SYS_REFCURSOR handling, and a #mysql50# prefix that bypasses table-name filesystem encoding and can lead to data theft, corruption, or remote code execution.

The other five are High severity. CVE-2026-102523 has a CVSS score of 8.0, High severity. It lets ALTER TABLE ... CONVERT ... PARTITION reach table files the user is not authorized to access. CVE-2026-107814 (CVSS 8.4, High severity) and CVE-2026-107818 (CVSS 8.4, High severity) let users with the FILE privilege plant startup files or inject environment values into the restarted service. CVE-2026-107815 has a CVSS score of 8.5, High severity, and is a stack out-of-bounds write in the CONNECT engine's DOS table type. CVE-2026-97380 has a CVSS score of 8.8, High severity, and lets a GRANT PROXY authorization error reset another account's password. The update fixes all eight in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

MariaDB server has eight vulnerabilities that let authenticated, low-privileged database users corrupt memory, reach table files they should not see, hijack other accounts, and in several cases run code on the server. Three are Critical: CVE-2026-85746, CVE-2026-85748, and CVE-2026-92262 each have a CVSS score of 9.9, Critical severity. They cover an out-of-bounds write in ST_AsText when it handles deeply nested GeometryCollections, a use-after-free in SYS_REFCURSOR handling, and a #mysql50# prefix that bypasses table-name filesystem encoding and can lead to data theft, corruption, or remote code execution.

The other five are High severity. CVE-2026-102523 has a CVSS score of 8.0, High severity. It lets ALTER TABLE ... CONVERT ... PARTITION reach table files the user is not authorized to access. CVE-2026-107814 (CVSS 8.4, High severity) and CVE-2026-107818 (CVSS 8.4, High severity) let users with the FILE privilege plant startup files or inject environment values into the restarted service. CVE-2026-107815 has a CVSS score of 8.5, High severity, and is a stack out-of-bounds write in the CONNECT engine's DOS table type. CVE-2026-97380 has a CVSS score of 8.8, High severity, and lets a GRANT PROXY authorization error reset another account's password. The update fixes all eight in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Metabase has released fixes for a critical flaw in how the platform handles native queries and actions against H2 data sources. CVE-2026-103928 has a CVSS score of 9.3, Critical severity. Metabase versions from 1.55.0 pass these queries through without restricting H2's host-facing built-in functions. As a result, any user allowed to run native queries or actions can call FILE_READ, FILE_WRITE, CSVREAD, CSVWRITE, or LINK_SCHEMA to read or write arbitrary files on the Metabase server or link other databases, which gives them elevated privileges on the host.

The default sample database uses H2, so standard deployments are exposed out of the box. The issue is fixed in Metabase 1.58.16, 1.59.13, 1.60.9, and 1.61.4. Update to the fixed release for your version line.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

Mozilla Firefox updates fix 28 Critical vulnerabilities across the browser's core. They include sandbox escapes, use-after-free bugs, out-of-bounds memory errors, invalid pointers, privilege escalation, a same-origin policy bypass, and a site isolation failure. The flaws affect the Networking, DOM, Graphics, WebRender, JavaScript Engine and JIT, XML, SVG, Storage, Widget, Print Preview, Toolkit, DevTools, and Layout components. Sandbox escapes are the main danger: they let attacker code break out of the browser's containment and reach the underlying system. The fixes ship in Firefox 158, 158.0.1, and 159, Firefox ESR 153.5, 153.6, and 115.44, and Thunderbird 158, 158.0.1, 159, 153.5, and 153.6.

CVE-2026-109774, CVE-2026-109780, CVE-2026-113399, CVE-2026-117862, CVE-2026-117917, CVE-2026-117945, CVE-2026-117946, CVE-2026-117980, CVE-2026-117981, and CVE-2026-117982 each have a CVSS score of 9.8, Critical severity. CVE-2026-109705, CVE-2026-109707, CVE-2026-109708, CVE-2026-109740, CVE-2026-109745, CVE-2026-109750, CVE-2026-109755, CVE-2026-117861, CVE-2026-117868, CVE-2026-117920, CVE-2026-117962, CVE-2026-117971, CVE-2026-117985, CVE-2026-117988, CVE-2026-117990, and CVE-2026-117997 each have a CVSS score of 9.6, Critical severity. CVE-2026-109772 and CVE-2026-118027 each have a CVSS score of 9.1, Critical severity.

This update for Nutanix Acropolis Operating System (AOS) fixes CVE-2026-84731, a critical authentication bypass in Nutanix Prism Element. CVE-2026-84731 has a CVSS score of 9.8, Critical severity. A misconfigured authentication filter lets an unauthenticated remote attacker send a crafted internal management HTTP header and receive a valid session cookie. That cookie carries a token with full cluster administrative privileges.

With that access, an attacker can run root-level commands on every Controller VM in the cluster, destroy the cluster, and reach VM memory and virtual disks. Proof-of-concept code for this flaw exists, which lowers the barrier to attack. Apply this update the same day.

The OPNsense core update fixes three flaws that let authenticated users with limited privileges take full control of the firewall as root. CVE-2026-57155 has a CVSS score of 9.9, Critical severity. A user with Firewall Alias Edit privilege can abuse the GeoIP alias importer to write files as root and then run commands through a scheduled root job, which fully compromises the firewall. CVE-2026-119409 has a CVSS score of 7.2, High severity. A user with the System: Firmware privilege can store a malicious firmware mirror URL that runs commands as root and can also turn off package signature checks. CVE-2026-71490 has a CVSS score of 7.1, High severity. A privilege-parsing error lets a user marked read-only still save configuration changes.

Proof-of-concept code is public for CVE-2026-57155 and CVE-2026-71490. Version 26.1.11 fixes CVE-2026-57155 and CVE-2026-71490, and version 26.7.8 fixes CVE-2026-119409. Update to 26.7.8 or later to close all three flaws.

The OPNsense core update fixes three flaws that let authenticated users with limited privileges take full control of the firewall as root. CVE-2026-57155 has a CVSS score of 9.9, Critical severity. A user with Firewall Alias Edit privilege can abuse the GeoIP alias importer to write files as root and then run commands through a scheduled root job, which fully compromises the firewall. CVE-2026-119409 has a CVSS score of 7.2, High severity. A user with the System: Firmware privilege can store a malicious firmware mirror URL that runs commands as root and can also turn off package signature checks. CVE-2026-71490 has a CVSS score of 7.1, High severity. A privilege-parsing error lets a user marked read-only still save configuration changes.

Proof-of-concept code is public for CVE-2026-57155 and CVE-2026-71490. Version 26.1.11 fixes CVE-2026-57155 and CVE-2026-71490, and version 26.7.8 fixes CVE-2026-119409. Update to 26.7.8 or later to close all three flaws.

The OPNsense core update fixes three flaws that let authenticated users with limited privileges take full control of the firewall as root. CVE-2026-57155 has a CVSS score of 9.9, Critical severity. A user with Firewall Alias Edit privilege can abuse the GeoIP alias importer to write files as root and then run commands through a scheduled root job, which fully compromises the firewall. CVE-2026-119409 has a CVSS score of 7.2, High severity. A user with the System: Firmware privilege can store a malicious firmware mirror URL that runs commands as root and can also turn off package signature checks. CVE-2026-71490 has a CVSS score of 7.1, High severity. A privilege-parsing error lets a user marked read-only still save configuration changes.

Proof-of-concept code is public for CVE-2026-57155 and CVE-2026-71490. Version 26.1.11 fixes CVE-2026-57155 and CVE-2026-71490, and version 26.7.8 fixes CVE-2026-119409. Update to 26.7.8 or later to close all three flaws.

Oracle has released a security update for Oracle JD Edwards EnterpriseOne Tools that fixes two Critical vulnerabilities. CVE-2026-91265 has a CVSS score of 9.1, Critical severity. CVE-2026-91305 has a CVSS score of 9.1, Critical severity. JD Edwards EnterpriseOne runs core enterprise processes such as finance, distribution, and manufacturing. A weakness at this layer puts business-critical data and operations at risk. Apply this update the same day.

Oracle has released a security update for Oracle JD Edwards EnterpriseOne Tools that fixes two Critical vulnerabilities. CVE-2026-91265 has a CVSS score of 9.1, Critical severity. CVE-2026-91305 has a CVSS score of 9.1, Critical severity. JD Edwards EnterpriseOne runs core enterprise processes such as finance, distribution, and manufacturing. A weakness at this layer puts business-critical data and operations at risk. Apply this update the same day.

Oracle Access Manager receives a security update that addresses two Critical vulnerabilities. CVE-2026-87251 has a CVSS score of 9.8, Critical severity. CVE-2026-87337 has a CVSS score of 10.0, Critical severity.

Oracle Access Manager controls authentication and access across enterprise applications, so a flaw here can expose every system it protects. Both vulnerabilities score at or near the top of the CVSS range, and organizations should apply this update on a same-day basis.

Oracle Access Manager receives a security update that addresses two Critical vulnerabilities. CVE-2026-87251 has a CVSS score of 9.8, Critical severity. CVE-2026-87337 has a CVSS score of 10.0, Critical severity.

Oracle Access Manager controls authentication and access across enterprise applications, so a flaw here can expose every system it protects. Both vulnerabilities score at or near the top of the CVSS range, and organizations should apply this update on a same-day basis.

Oracle has released a security update for Oracle APEX that fixes CVE-2026-101521. CVE-2026-101521 has a CVSS score of 9.8, Critical severity. A score this high puts Oracle APEX environments, and the applications and data they host, at serious risk until the update is applied. Patch all Oracle APEX instances on a same-day schedule.

Oracle Application Object Library has a critical vulnerability that attackers are already using. Attackers are actively exploiting CVE-2026-101767. This update fixes CVE-2026-101767, which has a CVSS score of 9.8, Critical severity.

Oracle Application Object Library is a core part of Oracle E-Business Suite, so an attacker who gets in this way puts business-critical data and operations at risk. Organizations running this product should treat the update as an emergency and deploy it now.

Oracle Business Intelligence Enterprise Edition has a Critical vulnerability that requires same-day attention. CVE-2026-91241 has a CVSS score of 9.1, Critical severity. This update closes the flaw in a platform that holds and serves an organization's core business data, so patching it quickly protects both the system and the data it reports on.

This Oracle Essbase update fixes eight Critical severity vulnerabilities in the analytics platform that organizations rely on for financial planning, forecasting, and reporting. All eight carry CVSS scores of 9.1 or higher. CVE-2026-91637, CVE-2026-91638, CVE-2026-91658, and CVE-2026-91663 each have a CVSS score of 9.9, Critical severity. CVE-2026-91665 has a CVSS score of 9.8, Critical severity. CVE-2026-91644 has a CVSS score of 9.3, Critical severity. CVE-2026-91655 and CVE-2026-91656 each have a CVSS score of 9.1, Critical severity.

Essbase holds sensitive financial and operational data, so this cluster of near-maximum scores puts that data at serious risk. Apply this update on the same day across all Essbase deployments.

This Oracle Essbase update fixes eight Critical severity vulnerabilities in the analytics platform that organizations rely on for financial planning, forecasting, and reporting. All eight carry CVSS scores of 9.1 or higher. CVE-2026-91637, CVE-2026-91638, CVE-2026-91658, and CVE-2026-91663 each have a CVSS score of 9.9, Critical severity. CVE-2026-91665 has a CVSS score of 9.8, Critical severity. CVE-2026-91644 has a CVSS score of 9.3, Critical severity. CVE-2026-91655 and CVE-2026-91656 each have a CVSS score of 9.1, Critical severity.

Essbase holds sensitive financial and operational data, so this cluster of near-maximum scores puts that data at serious risk. Apply this update on the same day across all Essbase deployments.

This Oracle Essbase update fixes eight Critical severity vulnerabilities in the analytics platform that organizations rely on for financial planning, forecasting, and reporting. All eight carry CVSS scores of 9.1 or higher. CVE-2026-91637, CVE-2026-91638, CVE-2026-91658, and CVE-2026-91663 each have a CVSS score of 9.9, Critical severity. CVE-2026-91665 has a CVSS score of 9.8, Critical severity. CVE-2026-91644 has a CVSS score of 9.3, Critical severity. CVE-2026-91655 and CVE-2026-91656 each have a CVSS score of 9.1, Critical severity.

Essbase holds sensitive financial and operational data, so this cluster of near-maximum scores puts that data at serious risk. Apply this update on the same day across all Essbase deployments.

This Oracle Essbase update fixes eight Critical severity vulnerabilities in the analytics platform that organizations rely on for financial planning, forecasting, and reporting. All eight carry CVSS scores of 9.1 or higher. CVE-2026-91637, CVE-2026-91638, CVE-2026-91658, and CVE-2026-91663 each have a CVSS score of 9.9, Critical severity. CVE-2026-91665 has a CVSS score of 9.8, Critical severity. CVE-2026-91644 has a CVSS score of 9.3, Critical severity. CVE-2026-91655 and CVE-2026-91656 each have a CVSS score of 9.1, Critical severity.

Essbase holds sensitive financial and operational data, so this cluster of near-maximum scores puts that data at serious risk. Apply this update on the same day across all Essbase deployments.

This Oracle Essbase update fixes eight Critical severity vulnerabilities in the analytics platform that organizations rely on for financial planning, forecasting, and reporting. All eight carry CVSS scores of 9.1 or higher. CVE-2026-91637, CVE-2026-91638, CVE-2026-91658, and CVE-2026-91663 each have a CVSS score of 9.9, Critical severity. CVE-2026-91665 has a CVSS score of 9.8, Critical severity. CVE-2026-91644 has a CVSS score of 9.3, Critical severity. CVE-2026-91655 and CVE-2026-91656 each have a CVSS score of 9.1, Critical severity.

Essbase holds sensitive financial and operational data, so this cluster of near-maximum scores puts that data at serious risk. Apply this update on the same day across all Essbase deployments.

This Oracle Essbase update fixes eight Critical severity vulnerabilities in the analytics platform that organizations rely on for financial planning, forecasting, and reporting. All eight carry CVSS scores of 9.1 or higher. CVE-2026-91637, CVE-2026-91638, CVE-2026-91658, and CVE-2026-91663 each have a CVSS score of 9.9, Critical severity. CVE-2026-91665 has a CVSS score of 9.8, Critical severity. CVE-2026-91644 has a CVSS score of 9.3, Critical severity. CVE-2026-91655 and CVE-2026-91656 each have a CVSS score of 9.1, Critical severity.

Essbase holds sensitive financial and operational data, so this cluster of near-maximum scores puts that data at serious risk. Apply this update on the same day across all Essbase deployments.

This Oracle Essbase update fixes eight Critical severity vulnerabilities in the analytics platform that organizations rely on for financial planning, forecasting, and reporting. All eight carry CVSS scores of 9.1 or higher. CVE-2026-91637, CVE-2026-91638, CVE-2026-91658, and CVE-2026-91663 each have a CVSS score of 9.9, Critical severity. CVE-2026-91665 has a CVSS score of 9.8, Critical severity. CVE-2026-91644 has a CVSS score of 9.3, Critical severity. CVE-2026-91655 and CVE-2026-91656 each have a CVSS score of 9.1, Critical severity.

Essbase holds sensitive financial and operational data, so this cluster of near-maximum scores puts that data at serious risk. Apply this update on the same day across all Essbase deployments.

This Oracle Essbase update fixes eight Critical severity vulnerabilities in the analytics platform that organizations rely on for financial planning, forecasting, and reporting. All eight carry CVSS scores of 9.1 or higher. CVE-2026-91637, CVE-2026-91638, CVE-2026-91658, and CVE-2026-91663 each have a CVSS score of 9.9, Critical severity. CVE-2026-91665 has a CVSS score of 9.8, Critical severity. CVE-2026-91644 has a CVSS score of 9.3, Critical severity. CVE-2026-91655 and CVE-2026-91656 each have a CVSS score of 9.1, Critical severity.

Essbase holds sensitive financial and operational data, so this cluster of near-maximum scores puts that data at serious risk. Apply this update on the same day across all Essbase deployments.

Oracle has released a security update for Oracle HTTP Server that addresses a single critical vulnerability. CVE-2026-87347 has a CVSS score of 9.6, Critical severity. Oracle HTTP Server often sits at the edge of enterprise web and middleware deployments, so a flaw at this severity puts internet-facing services and the systems behind them at serious risk.

Apply this update on the same day across all Oracle HTTP Server instances, starting with internet-facing and business-critical servers.

Oracle has released a security update for Oracle Identity Manager that fixes CVE-2026-91408. CVE-2026-91408 has a CVSS score of 9.8, Critical severity. Oracle Identity Manager controls user provisioning and access across the enterprise, so a Critical flaw in this platform puts the whole identity layer at risk. Apply this update the same day.

Oracle has released a security update for Oracle WebCenter Content that fixes CVE-2026-91495. CVE-2026-91495 has a CVSS score of 9.8, Critical severity. Oracle WebCenter Content stores and manages enterprise documents and records, so a flaw this severe puts sensitive business content and the systems connected to it at risk. Apply the update the same day it is released to close this exposure.

Oracle WebLogic Server has three Critical-severity vulnerabilities, and this patch fixes all of them. CVE-2026-83399 has a CVSS score of 9.8, Critical severity. CVE-2026-87302 has a CVSS score of 9.1, Critical severity. CVE-2026-91323 has a CVSS score of 9.8, Critical severity.

WebLogic Server runs important business applications and middleware for many companies. Three Critical flaws in one product make it a high-value target. Apply this update the same day to close all three before attackers can use them.

Oracle WebLogic Server has three Critical-severity vulnerabilities, and this patch fixes all of them. CVE-2026-83399 has a CVSS score of 9.8, Critical severity. CVE-2026-87302 has a CVSS score of 9.1, Critical severity. CVE-2026-91323 has a CVSS score of 9.8, Critical severity.

WebLogic Server runs important business applications and middleware for many companies. Three Critical flaws in one product make it a high-value target. Apply this update the same day to close all three before attackers can use them.

Oracle WebLogic Server has three Critical-severity vulnerabilities, and this patch fixes all of them. CVE-2026-83399 has a CVSS score of 9.8, Critical severity. CVE-2026-87302 has a CVSS score of 9.1, Critical severity. CVE-2026-91323 has a CVSS score of 9.8, Critical severity.

WebLogic Server runs important business applications and middleware for many companies. Three Critical flaws in one product make it a high-value target. Apply this update the same day to close all three before attackers can use them.

Oracle has released a security update for Oracle Siebel CRM Cloud Applications that fixes CVE-2026-101446. CVE-2026-101446 has a CVSS score of 9.9, Critical severity. Siebel CRM holds customer records, sales pipelines, and service history, so a flaw at this severity level puts core business data and customer trust at direct risk.

This update needs same-day priority. Teams running Oracle Siebel CRM Cloud Applications should apply the fix today to close this critical exposure before attackers can use it.

The OTRS update fixes three authentication and access-control flaws in the service management platform. CVE-2026-93582 has a CVSS score of 9.4, Critical severity: in Community Edition 6 and earlier, an unauthenticated attacker can send a crafted Remote-User header to log in through the Generic Interface as any existing agent or customer user, without a password, when HTTP Basic Authentication is enabled. OTRS 7 and later are not exposed to this attack, but the update removes the unused fallback as hardening. CVE-2026-78357 has a CVSS score of 9.1, Critical severity: a session token issued before an account is deactivated or its password is changed stays valid for up to about 16 hours, so a stolen token keeps working after the user is locked out.

CVE-2026-78355 has a CVSS score of 8.7, High severity: a path traversal flaw in the SendSupportBundle function lets an authenticated administrator delete files outside the intended directory, within the permissions of the OTRS process. The token and path traversal flaws affect OTRS 7.0.X, 8.0.X, and 2023.X through 2026.X before 2026.7.X. Community Edition 6.x and earlier, and products built on it, are also exposed.

The OTRS update fixes three authentication and access-control flaws in the service management platform. CVE-2026-93582 has a CVSS score of 9.4, Critical severity: in Community Edition 6 and earlier, an unauthenticated attacker can send a crafted Remote-User header to log in through the Generic Interface as any existing agent or customer user, without a password, when HTTP Basic Authentication is enabled. OTRS 7 and later are not exposed to this attack, but the update removes the unused fallback as hardening. CVE-2026-78357 has a CVSS score of 9.1, Critical severity: a session token issued before an account is deactivated or its password is changed stays valid for up to about 16 hours, so a stolen token keeps working after the user is locked out.

CVE-2026-78355 has a CVSS score of 8.7, High severity: a path traversal flaw in the SendSupportBundle function lets an authenticated administrator delete files outside the intended directory, within the permissions of the OTRS process. The token and path traversal flaws affect OTRS 7.0.X, 8.0.X, and 2023.X through 2026.X before 2026.7.X. Community Edition 6.x and earlier, and products built on it, are also exposed.

The OTRS update fixes three authentication and access-control flaws in the service management platform. CVE-2026-93582 has a CVSS score of 9.4, Critical severity: in Community Edition 6 and earlier, an unauthenticated attacker can send a crafted Remote-User header to log in through the Generic Interface as any existing agent or customer user, without a password, when HTTP Basic Authentication is enabled. OTRS 7 and later are not exposed to this attack, but the update removes the unused fallback as hardening. CVE-2026-78357 has a CVSS score of 9.1, Critical severity: a session token issued before an account is deactivated or its password is changed stays valid for up to about 16 hours, so a stolen token keeps working after the user is locked out.

CVE-2026-78355 has a CVSS score of 8.7, High severity: a path traversal flaw in the SendSupportBundle function lets an authenticated administrator delete files outside the intended directory, within the permissions of the OTRS process. The token and path traversal flaws affect OTRS 7.0.X, 8.0.X, and 2023.X through 2026.X before 2026.7.X. Community Edition 6.x and earlier, and products built on it, are also exposed.

Podman versions 5.8.8 and 6.1.3 fix a critical flaw that lets a container image override the security limits administrators set for it. CVE-2026-94603 has a CVSS score of 10.0, Critical severity. From version 4.4.0 onward, podman run treats any image carrying a specific checkpoint annotation as a checkpoint restore. It then silently ignores restrictions the user supplies at container creation, such as --cap-drop=ALL.

A malicious or tampered image can use this to choose weaker sandbox settings and gain capabilities the operator meant to strip away. That breaks container isolation without any warning to the operator. Rootful deployments are exposed; rootless containers are not affected because checkpoint and restore are unavailable in that mode. Upgrade to 5.8.8 or 6.1.3 to close the gap.

SAP NetWeaver Visual Composer has a critical authorization flaw in certain portal functions. CVE-2026-89110 has a CVSS score of 9.9, Critical severity. A low-privileged attacker can call internal operations on a preconfigured remote system. Depending on how that remote connection is configured, this can lead to full compromise of the remote system, with high impact on confidentiality, integrity, and availability.

This update fixes the missing authorization checks. Because the flaw reaches beyond Visual Composer into connected remote systems, the impact can extend across core SAP business infrastructure. Apply the fix the same day.

SAP S/4HANA (Manage Substitution/Validation Rules) has a code injection flaw that lets an authenticated attacker run arbitrary ABAP code on the system. CVE-2026-89107 has a CVSS score of 9.9, Critical severity. The rule definition feature uses a domain-specific scripting language and does not properly validate input. An attacker with specific business privileges can submit crafted input that the rule processing logic runs as ABAP code.

This update fixes the input validation flaw in the rule processing logic. A successful attack fully compromises the affected system and puts the confidentiality, integrity, and availability of core business data at serious risk. Apply the patch to S/4HANA systems on a same-day timeline.

This Splunk Enterprise security update closes six vulnerabilities, three of them Critical, that let low-privileged users take over the platform that holds an organization's security and operational data. CVE-2026-76299 has a CVSS score of 9.9, Critical severity, and CVE-2026-76302 has a CVSS score of 9.9, Critical severity. CVE-2026-76301 has a CVSS score of 9.8, Critical severity. These three come from an internal security review that produced a hardening release, and they cover improper access control, improper neutralization, and protection mechanism failure.

The High severity fixes stop privilege escalation and command execution. CVE-2026-76291 has a CVSS score of 8.8, High severity: users with the schedule_search capability could slip past the SPL safeguards for risky commands and disclose or alter data, or disrupt availability. CVE-2026-76298 has a CVSS score of 8.8, High severity: users without the admin or power roles could derive the superuser password for the PostgreSQL sidecar database from search job logs and run operating system commands on search head cluster members. CVE-2026-76293 has a CVSS score of 7.2, High severity: users with the edit_manager_xml capability could run arbitrary operating system commands through the Splunk Web Manager page.

This Splunk Enterprise security update closes six vulnerabilities, three of them Critical, that let low-privileged users take over the platform that holds an organization's security and operational data. CVE-2026-76299 has a CVSS score of 9.9, Critical severity, and CVE-2026-76302 has a CVSS score of 9.9, Critical severity. CVE-2026-76301 has a CVSS score of 9.8, Critical severity. These three come from an internal security review that produced a hardening release, and they cover improper access control, improper neutralization, and protection mechanism failure.

The High severity fixes stop privilege escalation and command execution. CVE-2026-76291 has a CVSS score of 8.8, High severity: users with the schedule_search capability could slip past the SPL safeguards for risky commands and disclose or alter data, or disrupt availability. CVE-2026-76298 has a CVSS score of 8.8, High severity: users without the admin or power roles could derive the superuser password for the PostgreSQL sidecar database from search job logs and run operating system commands on search head cluster members. CVE-2026-76293 has a CVSS score of 7.2, High severity: users with the edit_manager_xml capability could run arbitrary operating system commands through the Splunk Web Manager page.

This Splunk Enterprise security update closes six vulnerabilities, three of them Critical, that let low-privileged users take over the platform that holds an organization's security and operational data. CVE-2026-76299 has a CVSS score of 9.9, Critical severity, and CVE-2026-76302 has a CVSS score of 9.9, Critical severity. CVE-2026-76301 has a CVSS score of 9.8, Critical severity. These three come from an internal security review that produced a hardening release, and they cover improper access control, improper neutralization, and protection mechanism failure.

The High severity fixes stop privilege escalation and command execution. CVE-2026-76291 has a CVSS score of 8.8, High severity: users with the schedule_search capability could slip past the SPL safeguards for risky commands and disclose or alter data, or disrupt availability. CVE-2026-76298 has a CVSS score of 8.8, High severity: users without the admin or power roles could derive the superuser password for the PostgreSQL sidecar database from search job logs and run operating system commands on search head cluster members. CVE-2026-76293 has a CVSS score of 7.2, High severity: users with the edit_manager_xml capability could run arbitrary operating system commands through the Splunk Web Manager page.

This Splunk Enterprise security update closes six vulnerabilities, three of them Critical, that let low-privileged users take over the platform that holds an organization's security and operational data. CVE-2026-76299 has a CVSS score of 9.9, Critical severity, and CVE-2026-76302 has a CVSS score of 9.9, Critical severity. CVE-2026-76301 has a CVSS score of 9.8, Critical severity. These three come from an internal security review that produced a hardening release, and they cover improper access control, improper neutralization, and protection mechanism failure.

The High severity fixes stop privilege escalation and command execution. CVE-2026-76291 has a CVSS score of 8.8, High severity: users with the schedule_search capability could slip past the SPL safeguards for risky commands and disclose or alter data, or disrupt availability. CVE-2026-76298 has a CVSS score of 8.8, High severity: users without the admin or power roles could derive the superuser password for the PostgreSQL sidecar database from search job logs and run operating system commands on search head cluster members. CVE-2026-76293 has a CVSS score of 7.2, High severity: users with the edit_manager_xml capability could run arbitrary operating system commands through the Splunk Web Manager page.

This Splunk Enterprise security update closes six vulnerabilities, three of them Critical, that let low-privileged users take over the platform that holds an organization's security and operational data. CVE-2026-76299 has a CVSS score of 9.9, Critical severity, and CVE-2026-76302 has a CVSS score of 9.9, Critical severity. CVE-2026-76301 has a CVSS score of 9.8, Critical severity. These three come from an internal security review that produced a hardening release, and they cover improper access control, improper neutralization, and protection mechanism failure.

The High severity fixes stop privilege escalation and command execution. CVE-2026-76291 has a CVSS score of 8.8, High severity: users with the schedule_search capability could slip past the SPL safeguards for risky commands and disclose or alter data, or disrupt availability. CVE-2026-76298 has a CVSS score of 8.8, High severity: users without the admin or power roles could derive the superuser password for the PostgreSQL sidecar database from search job logs and run operating system commands on search head cluster members. CVE-2026-76293 has a CVSS score of 7.2, High severity: users with the edit_manager_xml capability could run arbitrary operating system commands through the Splunk Web Manager page.

This Splunk Enterprise security update closes six vulnerabilities, three of them Critical, that let low-privileged users take over the platform that holds an organization's security and operational data. CVE-2026-76299 has a CVSS score of 9.9, Critical severity, and CVE-2026-76302 has a CVSS score of 9.9, Critical severity. CVE-2026-76301 has a CVSS score of 9.8, Critical severity. These three come from an internal security review that produced a hardening release, and they cover improper access control, improper neutralization, and protection mechanism failure.

The High severity fixes stop privilege escalation and command execution. CVE-2026-76291 has a CVSS score of 8.8, High severity: users with the schedule_search capability could slip past the SPL safeguards for risky commands and disclose or alter data, or disrupt availability. CVE-2026-76298 has a CVSS score of 8.8, High severity: users without the admin or power roles could derive the superuser password for the PostgreSQL sidecar database from search job logs and run operating system commands on search head cluster members. CVE-2026-76293 has a CVSS score of 7.2, High severity: users with the edit_manager_xml capability could run arbitrary operating system commands through the Splunk Web Manager page.

Splunk SOAR has a hardening release that fixes six Critical vulnerabilities found in an internal security review. They involve improper access control, poor resource lifetime control, mishandled exceptional conditions, a protection mechanism failure, an unprotected alternate path, and files or directories that outside parties can reach. Two of the flaws allow elevation of privilege. An attacker who exploits them could gain elevated access to the platform that runs an organization's security automation and incident response.

CVE-2026-76407 has a CVSS score of 9.8, Critical severity. CVE-2026-76408 has a CVSS score of 9.8, Critical severity. CVE-2026-76527 has a CVSS score of 9.8, Critical severity. CVE-2026-76528 has a CVSS score of 9.8, Critical severity. CVE-2026-76529 has a CVSS score of 9.8, Critical severity. CVE-2026-76531 has a CVSS score of 9.9, Critical severity.

Splunk SOAR has a hardening release that fixes six Critical vulnerabilities found in an internal security review. They involve improper access control, poor resource lifetime control, mishandled exceptional conditions, a protection mechanism failure, an unprotected alternate path, and files or directories that outside parties can reach. Two of the flaws allow elevation of privilege. An attacker who exploits them could gain elevated access to the platform that runs an organization's security automation and incident response.

CVE-2026-76407 has a CVSS score of 9.8, Critical severity. CVE-2026-76408 has a CVSS score of 9.8, Critical severity. CVE-2026-76527 has a CVSS score of 9.8, Critical severity. CVE-2026-76528 has a CVSS score of 9.8, Critical severity. CVE-2026-76529 has a CVSS score of 9.8, Critical severity. CVE-2026-76531 has a CVSS score of 9.9, Critical severity.

Splunk SOAR has a hardening release that fixes six Critical vulnerabilities found in an internal security review. They involve improper access control, poor resource lifetime control, mishandled exceptional conditions, a protection mechanism failure, an unprotected alternate path, and files or directories that outside parties can reach. Two of the flaws allow elevation of privilege. An attacker who exploits them could gain elevated access to the platform that runs an organization's security automation and incident response.

CVE-2026-76407 has a CVSS score of 9.8, Critical severity. CVE-2026-76408 has a CVSS score of 9.8, Critical severity. CVE-2026-76527 has a CVSS score of 9.8, Critical severity. CVE-2026-76528 has a CVSS score of 9.8, Critical severity. CVE-2026-76529 has a CVSS score of 9.8, Critical severity. CVE-2026-76531 has a CVSS score of 9.9, Critical severity.

Splunk SOAR has a hardening release that fixes six Critical vulnerabilities found in an internal security review. They involve improper access control, poor resource lifetime control, mishandled exceptional conditions, a protection mechanism failure, an unprotected alternate path, and files or directories that outside parties can reach. Two of the flaws allow elevation of privilege. An attacker who exploits them could gain elevated access to the platform that runs an organization's security automation and incident response.

CVE-2026-76407 has a CVSS score of 9.8, Critical severity. CVE-2026-76408 has a CVSS score of 9.8, Critical severity. CVE-2026-76527 has a CVSS score of 9.8, Critical severity. CVE-2026-76528 has a CVSS score of 9.8, Critical severity. CVE-2026-76529 has a CVSS score of 9.8, Critical severity. CVE-2026-76531 has a CVSS score of 9.9, Critical severity.

Splunk SOAR has a hardening release that fixes six Critical vulnerabilities found in an internal security review. They involve improper access control, poor resource lifetime control, mishandled exceptional conditions, a protection mechanism failure, an unprotected alternate path, and files or directories that outside parties can reach. Two of the flaws allow elevation of privilege. An attacker who exploits them could gain elevated access to the platform that runs an organization's security automation and incident response.

CVE-2026-76407 has a CVSS score of 9.8, Critical severity. CVE-2026-76408 has a CVSS score of 9.8, Critical severity. CVE-2026-76527 has a CVSS score of 9.8, Critical severity. CVE-2026-76528 has a CVSS score of 9.8, Critical severity. CVE-2026-76529 has a CVSS score of 9.8, Critical severity. CVE-2026-76531 has a CVSS score of 9.9, Critical severity.

Splunk SOAR has a hardening release that fixes six Critical vulnerabilities found in an internal security review. They involve improper access control, poor resource lifetime control, mishandled exceptional conditions, a protection mechanism failure, an unprotected alternate path, and files or directories that outside parties can reach. Two of the flaws allow elevation of privilege. An attacker who exploits them could gain elevated access to the platform that runs an organization's security automation and incident response.

CVE-2026-76407 has a CVSS score of 9.8, Critical severity. CVE-2026-76408 has a CVSS score of 9.8, Critical severity. CVE-2026-76527 has a CVSS score of 9.8, Critical severity. CVE-2026-76528 has a CVSS score of 9.8, Critical severity. CVE-2026-76529 has a CVSS score of 9.8, Critical severity. CVE-2026-76531 has a CVSS score of 9.9, Critical severity.

Wazuh Manager 4.14.8 closes six vulnerabilities in the central manager, two of them Critical, all reachable from enrolled agents, cluster workers, or user accounts the platform already trusts. CVE-2026-74040 has a CVSS score of 9.1, Critical severity; a cluster worker can overwrite protected master files such as ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent. CVE-2026-74043 has a CVSS score of 9.0, Critical severity; a malicious worker holding the cluster key can use path traversal in rule, decoder, and list uploads to write files at arbitrary paths as the wazuh user.

The release also fixes four High-severity flaws. CVE-2026-74034 has a CVSS score of 7.5, High severity, and lets any enrolled agent read arbitrary files as root, including /etc/shadow and client.keys. CVE-2026-74035 has a CVSS score of 7.2, High severity, and lets a delegated user administrator submit an empty password to take over the wazuh superuser account. CVE-2026-74037 has a CVSS score of 7.2, High severity, and lets administrators whose access was revoked keep authenticating because issued tokens are never checked against the blacklist. CVE-2026-74045 has a CVSS score of 7.1, High severity, and lets an enrolled agent crash wazuh-analysisd with a crafted syscheck event, causing a fleet-wide detection outage. Proof-of-concept code exists for CVE-2026-74034, CVE-2026-74037, CVE-2026-74040, and CVE-2026-74045. Affected versions reach back to 3.9.0; upgrade every manager to 4.14.8.

Wazuh Manager 4.14.8 closes six vulnerabilities in the central manager, two of them Critical, all reachable from enrolled agents, cluster workers, or user accounts the platform already trusts. CVE-2026-74040 has a CVSS score of 9.1, Critical severity; a cluster worker can overwrite protected master files such as ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent. CVE-2026-74043 has a CVSS score of 9.0, Critical severity; a malicious worker holding the cluster key can use path traversal in rule, decoder, and list uploads to write files at arbitrary paths as the wazuh user.

The release also fixes four High-severity flaws. CVE-2026-74034 has a CVSS score of 7.5, High severity, and lets any enrolled agent read arbitrary files as root, including /etc/shadow and client.keys. CVE-2026-74035 has a CVSS score of 7.2, High severity, and lets a delegated user administrator submit an empty password to take over the wazuh superuser account. CVE-2026-74037 has a CVSS score of 7.2, High severity, and lets administrators whose access was revoked keep authenticating because issued tokens are never checked against the blacklist. CVE-2026-74045 has a CVSS score of 7.1, High severity, and lets an enrolled agent crash wazuh-analysisd with a crafted syscheck event, causing a fleet-wide detection outage. Proof-of-concept code exists for CVE-2026-74034, CVE-2026-74037, CVE-2026-74040, and CVE-2026-74045. Affected versions reach back to 3.9.0; upgrade every manager to 4.14.8.

Wazuh Manager 4.14.8 closes six vulnerabilities in the central manager, two of them Critical, all reachable from enrolled agents, cluster workers, or user accounts the platform already trusts. CVE-2026-74040 has a CVSS score of 9.1, Critical severity; a cluster worker can overwrite protected master files such as ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent. CVE-2026-74043 has a CVSS score of 9.0, Critical severity; a malicious worker holding the cluster key can use path traversal in rule, decoder, and list uploads to write files at arbitrary paths as the wazuh user.

The release also fixes four High-severity flaws. CVE-2026-74034 has a CVSS score of 7.5, High severity, and lets any enrolled agent read arbitrary files as root, including /etc/shadow and client.keys. CVE-2026-74035 has a CVSS score of 7.2, High severity, and lets a delegated user administrator submit an empty password to take over the wazuh superuser account. CVE-2026-74037 has a CVSS score of 7.2, High severity, and lets administrators whose access was revoked keep authenticating because issued tokens are never checked against the blacklist. CVE-2026-74045 has a CVSS score of 7.1, High severity, and lets an enrolled agent crash wazuh-analysisd with a crafted syscheck event, causing a fleet-wide detection outage. Proof-of-concept code exists for CVE-2026-74034, CVE-2026-74037, CVE-2026-74040, and CVE-2026-74045. Affected versions reach back to 3.9.0; upgrade every manager to 4.14.8.

Wazuh Manager 4.14.8 closes six vulnerabilities in the central manager, two of them Critical, all reachable from enrolled agents, cluster workers, or user accounts the platform already trusts. CVE-2026-74040 has a CVSS score of 9.1, Critical severity; a cluster worker can overwrite protected master files such as ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent. CVE-2026-74043 has a CVSS score of 9.0, Critical severity; a malicious worker holding the cluster key can use path traversal in rule, decoder, and list uploads to write files at arbitrary paths as the wazuh user.

The release also fixes four High-severity flaws. CVE-2026-74034 has a CVSS score of 7.5, High severity, and lets any enrolled agent read arbitrary files as root, including /etc/shadow and client.keys. CVE-2026-74035 has a CVSS score of 7.2, High severity, and lets a delegated user administrator submit an empty password to take over the wazuh superuser account. CVE-2026-74037 has a CVSS score of 7.2, High severity, and lets administrators whose access was revoked keep authenticating because issued tokens are never checked against the blacklist. CVE-2026-74045 has a CVSS score of 7.1, High severity, and lets an enrolled agent crash wazuh-analysisd with a crafted syscheck event, causing a fleet-wide detection outage. Proof-of-concept code exists for CVE-2026-74034, CVE-2026-74037, CVE-2026-74040, and CVE-2026-74045. Affected versions reach back to 3.9.0; upgrade every manager to 4.14.8.

Wazuh Manager 4.14.8 closes six vulnerabilities in the central manager, two of them Critical, all reachable from enrolled agents, cluster workers, or user accounts the platform already trusts. CVE-2026-74040 has a CVSS score of 9.1, Critical severity; a cluster worker can overwrite protected master files such as ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent. CVE-2026-74043 has a CVSS score of 9.0, Critical severity; a malicious worker holding the cluster key can use path traversal in rule, decoder, and list uploads to write files at arbitrary paths as the wazuh user.

The release also fixes four High-severity flaws. CVE-2026-74034 has a CVSS score of 7.5, High severity, and lets any enrolled agent read arbitrary files as root, including /etc/shadow and client.keys. CVE-2026-74035 has a CVSS score of 7.2, High severity, and lets a delegated user administrator submit an empty password to take over the wazuh superuser account. CVE-2026-74037 has a CVSS score of 7.2, High severity, and lets administrators whose access was revoked keep authenticating because issued tokens are never checked against the blacklist. CVE-2026-74045 has a CVSS score of 7.1, High severity, and lets an enrolled agent crash wazuh-analysisd with a crafted syscheck event, causing a fleet-wide detection outage. Proof-of-concept code exists for CVE-2026-74034, CVE-2026-74037, CVE-2026-74040, and CVE-2026-74045. Affected versions reach back to 3.9.0; upgrade every manager to 4.14.8.

Wazuh Manager 4.14.8 closes six vulnerabilities in the central manager, two of them Critical, all reachable from enrolled agents, cluster workers, or user accounts the platform already trusts. CVE-2026-74040 has a CVSS score of 9.1, Critical severity; a cluster worker can overwrite protected master files such as ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent. CVE-2026-74043 has a CVSS score of 9.0, Critical severity; a malicious worker holding the cluster key can use path traversal in rule, decoder, and list uploads to write files at arbitrary paths as the wazuh user.

The release also fixes four High-severity flaws. CVE-2026-74034 has a CVSS score of 7.5, High severity, and lets any enrolled agent read arbitrary files as root, including /etc/shadow and client.keys. CVE-2026-74035 has a CVSS score of 7.2, High severity, and lets a delegated user administrator submit an empty password to take over the wazuh superuser account. CVE-2026-74037 has a CVSS score of 7.2, High severity, and lets administrators whose access was revoked keep authenticating because issued tokens are never checked against the blacklist. CVE-2026-74045 has a CVSS score of 7.1, High severity, and lets an enrolled agent crash wazuh-analysisd with a crafted syscheck event, causing a fleet-wide detection outage. Proof-of-concept code exists for CVE-2026-74034, CVE-2026-74037, CVE-2026-74040, and CVE-2026-74045. Affected versions reach back to 3.9.0; upgrade every manager to 4.14.8.

Xen has a Critical flaw in its CPU mitigation logic. CVE-2026-79608 has a CVSS score of 9.8, Critical severity. A rework of the Zenbleed workaround introduced an inverted conditional, so the hypervisor applies the protection when it is not needed and skips it when it is. Affected hosts can be left open to the Zenbleed CPU flaw while appearing protected.

This update corrects the inverted check and restores the Zenbleed workaround on the systems that need it. Organizations running Xen-based virtualization should prioritize this update to restore the isolation that multi-tenant and shared hosts depend on.

This Znuny update closes an authentication bypass in versions through 7.3.6. CVE-2026-93483 has a CVSS score of 9.5, Critical severity. On systems that use HTTPBasicAuth as the authentication backend, the agent and customer interfaces read the login username from a request header that the attacker controls. By sending a forged Remote-User header, an attacker can sign in as any existing user, including administrators, without credentials. This gives them full access to confidential ticket data and system controls.

Organizations running Znuny with HTTPBasicAuth enabled for agents or customers face direct exposure and should apply this update the same day.

Zulip has released version 12.2 to fix an authentication flaw in Zulip Server versions through 12.1. CVE-2026-102893 has a CVSS score of 9.1, Critical severity. The OpenID Connect login backend matches the email address from the identity provider to an existing account without rejecting a claim explicitly marked as unverified. If a configured identity provider sends an email address the user does not control, Zulip can log that user into the existing account tied to that address. This lets an attacker take over another user's account and gain that user's privileges.

The attack requires a misconfigured trusted identity provider. Deployments whose identity provider only issues email addresses the user controls are not affected. Upgrading to Zulip Server 12.2 closes the gap.

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software has an update for a denial-of-service flaw in its Remote Access SSL VPN service. An unauthenticated, remote attacker can send a crafted request while connecting to the SSL remote access VPN and force the device to reload. The flaw comes from logic errors when secondary authentication is configured on a tunnel group. Cisco Secure Firewall Threat Defense (FTD) Software is also affected.

The update fixes CVE-2026-76418, which has a CVSS score of 8.6, High severity. Attackers are actively exploiting CVE-2026-76418. Each successful attack restarts the firewall, which cuts off VPN access and network protection while the device reboots. Apply this patch immediately to every ASA and FTD device that offers SSL remote access VPN.

GFI KerioConnect has two High severity flaws that expose user mailboxes and Windows endpoints to compromise. CVE-2026-112353 has a CVSS score of 8.2, High severity. It is a stored cross-site scripting flaw in the Webmail component. An attacker sends a crafted SVG attachment that slips past sanitization, and the attacker's script runs in the victim's authenticated Webmail session when the attachment is opened. The attacker can then steal the victim's credentials and mailbox contents. Attackers are actively exploiting CVE-2026-112353 to steal credentials and mailbox data.

CVE-2026-112357 has a CVSS score of 7.8, High severity. Weak installer permissions in the KerioConnect Outlook Connector (Offline Edition) leave the product directory writable by standard users. A local attacker can replace a service binary that runs as LocalSystem and gain full SYSTEM privileges at the next service start or reboot. The fixes ship in Kerio Connect 10.0.8 Patch 2 for the Webmail flaw and in Outlook Connector 10.0.9 Patch 2 for the privilege escalation flaw.

GFI KerioConnect has two High severity flaws that expose user mailboxes and Windows endpoints to compromise. CVE-2026-112353 has a CVSS score of 8.2, High severity. It is a stored cross-site scripting flaw in the Webmail component. An attacker sends a crafted SVG attachment that slips past sanitization, and the attacker's script runs in the victim's authenticated Webmail session when the attachment is opened. The attacker can then steal the victim's credentials and mailbox contents. Attackers are actively exploiting CVE-2026-112353 to steal credentials and mailbox data.

CVE-2026-112357 has a CVSS score of 7.8, High severity. Weak installer permissions in the KerioConnect Outlook Connector (Offline Edition) leave the product directory writable by standard users. A local attacker can replace a service binary that runs as LocalSystem and gain full SYSTEM privileges at the next service start or reboot. The fixes ship in Kerio Connect 10.0.8 Patch 2 for the Webmail flaw and in Outlook Connector 10.0.9 Patch 2 for the privilege escalation flaw.

Perforce Puppet Enterprise is getting an urgent update that fixes two Critical flaws in Puppet Server, the system that controls configuration across every managed node. CVE-2026-115731 has a CVSS score of 9.4, Critical severity. It is an unsafe deserialization flaw in report processing. Any client with a CA-signed agent certificate can send a crafted report and run arbitrary code on the Puppet Server as its service user. Where the certificate authority autosigns requests without strong checks, an unauthenticated network attacker can get that certificate. CVE-2026-115732 has a CVSS score of 9.0, Critical severity. It is a certificate-name matching flaw that lets a client pose as an authorized host. Attackers can then impersonate other nodes, reach certificate-authority administration, and run commands on managed nodes.

Attackers are actively exploiting CVE-2026-115732. Because Puppet Server pushes configuration to the whole fleet, one compromised server can spread across the enterprise. Apply the update immediately and review certificate autosign settings.

Perforce Puppet Enterprise is getting an urgent update that fixes two Critical flaws in Puppet Server, the system that controls configuration across every managed node. CVE-2026-115731 has a CVSS score of 9.4, Critical severity. It is an unsafe deserialization flaw in report processing. Any client with a CA-signed agent certificate can send a crafted report and run arbitrary code on the Puppet Server as its service user. Where the certificate authority autosigns requests without strong checks, an unauthenticated network attacker can get that certificate. CVE-2026-115732 has a CVSS score of 9.0, Critical severity. It is a certificate-name matching flaw that lets a client pose as an authorized host. Attackers can then impersonate other nodes, reach certificate-authority administration, and run commands on managed nodes.

Attackers are actively exploiting CVE-2026-115732. Because Puppet Server pushes configuration to the whole fleet, one compromised server can spread across the enterprise. Apply the update immediately and review certificate autosign settings.

This WordPress update fixes a High-severity flaw in WordPress Core, versions 4.7 through 7.1.3. CVE-2026-119977 has a CVSS score of 8.1, High severity. During full-package core upgrades, WordPress uses predictable staging paths that anyone can reach from the web. This lets unauthenticated attackers run code on the server while the upgrade is in progress.

Attackers are actively exploiting CVE-2026-119977. Every vulnerable site is exposed each time it runs a core upgrade, so organizations must apply this update right away to close the window and protect the web server and its data.

The Zyxel GS1900-24E firmware update fixes an out-of-bounds write flaw in the switch's CGI program. It affects firmware versions through 2.90(AAHK.2)C0. An unauthenticated attacker on an adjacent network can send a crafted HTTP request and run OS commands on the device. This gives the attacker remote code execution and elevation of privilege on a core network switch.

CVE-2026-107441 has a CVSS score of 8.8, High severity. Attackers are actively exploiting CVE-2026-107441 in the wild. Organizations should treat this update as an immediate priority. A compromised switch can expose, redirect, or disrupt traffic across the network segments it serves.

Absolute Secure Access has two critical flaws that let attackers weaken the server that controls client security. CVE-2026-116769 has a CVSS score of 9.3, Critical severity. It is an authentication bypass in Secure Access servers from version 13.0 up to, but not including, 14.61. It lets attackers change a client's security settings through the server. CVE-2026-97718 has a CVSS score of 9.4, Critical severity. It is a cross-site request forgery flaw in version 14.60 that gets around a security control, so an attacker can trick an administrator into creating an account the attacker controls.

Together, these flaws threaten the trust between the Secure Access server and every client it manages. Attackers can quietly weaken endpoint protections or plant an account they control on the server. Upgrading to version 14.61 closes both issues.

Absolute Secure Access has two critical flaws that let attackers weaken the server that controls client security. CVE-2026-116769 has a CVSS score of 9.3, Critical severity. It is an authentication bypass in Secure Access servers from version 13.0 up to, but not including, 14.61. It lets attackers change a client's security settings through the server. CVE-2026-97718 has a CVSS score of 9.4, Critical severity. It is a cross-site request forgery flaw in version 14.60 that gets around a security control, so an attacker can trick an administrator into creating an account the attacker controls.

Together, these flaws threaten the trust between the Secure Access server and every client it manages. Attackers can quietly weaken endpoint protections or plant an account they control on the server. Upgrading to version 14.61 closes both issues.

Adobe Campaign Classic receives a security update that fixes eight Critical vulnerabilities. Together they let attackers inject code and OS commands, run arbitrary SQL, get around authorization checks, and hijack user sessions. Most need only low privileges and no user interaction, and every flaw has a changed scope, so a compromise can reach well past the vulnerable component. That puts the platform's customer data and campaign infrastructure at direct risk.

The update covers these issues. CVE-2026-105781 is an SQL injection that lets attackers run arbitrary SQL commands. It has a CVSS score of 10.0, Critical severity. CVE-2026-104351 (code injection), CVE-2026-104353 (OS command injection), CVE-2026-105489 (SQL injection) and CVE-2026-105780 (incorrect authorization) each lead to arbitrary code execution by a low-privileged attacker. Each has a CVSS score of 9.9, Critical severity. CVE-2026-104350 is a reflected cross-site scripting flaw that can take over a victim's account or session. It has a CVSS score of 9.3, Critical severity. CVE-2026-104354 is an SQL injection that gives a high-privileged attacker code execution, and CVE-2026-105779 is an SQL injection that bypasses security controls for unauthorized read and limited write access. Each has a CVSS score of 9.1, Critical severity.

Adobe Campaign Classic receives a security update that fixes eight Critical vulnerabilities. Together they let attackers inject code and OS commands, run arbitrary SQL, get around authorization checks, and hijack user sessions. Most need only low privileges and no user interaction, and every flaw has a changed scope, so a compromise can reach well past the vulnerable component. That puts the platform's customer data and campaign infrastructure at direct risk.

The update covers these issues. CVE-2026-105781 is an SQL injection that lets attackers run arbitrary SQL commands. It has a CVSS score of 10.0, Critical severity. CVE-2026-104351 (code injection), CVE-2026-104353 (OS command injection), CVE-2026-105489 (SQL injection) and CVE-2026-105780 (incorrect authorization) each lead to arbitrary code execution by a low-privileged attacker. Each has a CVSS score of 9.9, Critical severity. CVE-2026-104350 is a reflected cross-site scripting flaw that can take over a victim's account or session. It has a CVSS score of 9.3, Critical severity. CVE-2026-104354 is an SQL injection that gives a high-privileged attacker code execution, and CVE-2026-105779 is an SQL injection that bypasses security controls for unauthorized read and limited write access. Each has a CVSS score of 9.1, Critical severity.

Adobe Campaign Classic receives a security update that fixes eight Critical vulnerabilities. Together they let attackers inject code and OS commands, run arbitrary SQL, get around authorization checks, and hijack user sessions. Most need only low privileges and no user interaction, and every flaw has a changed scope, so a compromise can reach well past the vulnerable component. That puts the platform's customer data and campaign infrastructure at direct risk.

The update covers these issues. CVE-2026-105781 is an SQL injection that lets attackers run arbitrary SQL commands. It has a CVSS score of 10.0, Critical severity. CVE-2026-104351 (code injection), CVE-2026-104353 (OS command injection), CVE-2026-105489 (SQL injection) and CVE-2026-105780 (incorrect authorization) each lead to arbitrary code execution by a low-privileged attacker. Each has a CVSS score of 9.9, Critical severity. CVE-2026-104350 is a reflected cross-site scripting flaw that can take over a victim's account or session. It has a CVSS score of 9.3, Critical severity. CVE-2026-104354 is an SQL injection that gives a high-privileged attacker code execution, and CVE-2026-105779 is an SQL injection that bypasses security controls for unauthorized read and limited write access. Each has a CVSS score of 9.1, Critical severity.

Adobe Campaign Classic receives a security update that fixes eight Critical vulnerabilities. Together they let attackers inject code and OS commands, run arbitrary SQL, get around authorization checks, and hijack user sessions. Most need only low privileges and no user interaction, and every flaw has a changed scope, so a compromise can reach well past the vulnerable component. That puts the platform's customer data and campaign infrastructure at direct risk.

The update covers these issues. CVE-2026-105781 is an SQL injection that lets attackers run arbitrary SQL commands. It has a CVSS score of 10.0, Critical severity. CVE-2026-104351 (code injection), CVE-2026-104353 (OS command injection), CVE-2026-105489 (SQL injection) and CVE-2026-105780 (incorrect authorization) each lead to arbitrary code execution by a low-privileged attacker. Each has a CVSS score of 9.9, Critical severity. CVE-2026-104350 is a reflected cross-site scripting flaw that can take over a victim's account or session. It has a CVSS score of 9.3, Critical severity. CVE-2026-104354 is an SQL injection that gives a high-privileged attacker code execution, and CVE-2026-105779 is an SQL injection that bypasses security controls for unauthorized read and limited write access. Each has a CVSS score of 9.1, Critical severity.

Adobe Campaign Classic receives a security update that fixes eight Critical vulnerabilities. Together they let attackers inject code and OS commands, run arbitrary SQL, get around authorization checks, and hijack user sessions. Most need only low privileges and no user interaction, and every flaw has a changed scope, so a compromise can reach well past the vulnerable component. That puts the platform's customer data and campaign infrastructure at direct risk.

The update covers these issues. CVE-2026-105781 is an SQL injection that lets attackers run arbitrary SQL commands. It has a CVSS score of 10.0, Critical severity. CVE-2026-104351 (code injection), CVE-2026-104353 (OS command injection), CVE-2026-105489 (SQL injection) and CVE-2026-105780 (incorrect authorization) each lead to arbitrary code execution by a low-privileged attacker. Each has a CVSS score of 9.9, Critical severity. CVE-2026-104350 is a reflected cross-site scripting flaw that can take over a victim's account or session. It has a CVSS score of 9.3, Critical severity. CVE-2026-104354 is an SQL injection that gives a high-privileged attacker code execution, and CVE-2026-105779 is an SQL injection that bypasses security controls for unauthorized read and limited write access. Each has a CVSS score of 9.1, Critical severity.

Adobe Campaign Classic receives a security update that fixes eight Critical vulnerabilities. Together they let attackers inject code and OS commands, run arbitrary SQL, get around authorization checks, and hijack user sessions. Most need only low privileges and no user interaction, and every flaw has a changed scope, so a compromise can reach well past the vulnerable component. That puts the platform's customer data and campaign infrastructure at direct risk.

The update covers these issues. CVE-2026-105781 is an SQL injection that lets attackers run arbitrary SQL commands. It has a CVSS score of 10.0, Critical severity. CVE-2026-104351 (code injection), CVE-2026-104353 (OS command injection), CVE-2026-105489 (SQL injection) and CVE-2026-105780 (incorrect authorization) each lead to arbitrary code execution by a low-privileged attacker. Each has a CVSS score of 9.9, Critical severity. CVE-2026-104350 is a reflected cross-site scripting flaw that can take over a victim's account or session. It has a CVSS score of 9.3, Critical severity. CVE-2026-104354 is an SQL injection that gives a high-privileged attacker code execution, and CVE-2026-105779 is an SQL injection that bypasses security controls for unauthorized read and limited write access. Each has a CVSS score of 9.1, Critical severity.

Adobe Campaign Classic receives a security update that fixes eight Critical vulnerabilities. Together they let attackers inject code and OS commands, run arbitrary SQL, get around authorization checks, and hijack user sessions. Most need only low privileges and no user interaction, and every flaw has a changed scope, so a compromise can reach well past the vulnerable component. That puts the platform's customer data and campaign infrastructure at direct risk.

The update covers these issues. CVE-2026-105781 is an SQL injection that lets attackers run arbitrary SQL commands. It has a CVSS score of 10.0, Critical severity. CVE-2026-104351 (code injection), CVE-2026-104353 (OS command injection), CVE-2026-105489 (SQL injection) and CVE-2026-105780 (incorrect authorization) each lead to arbitrary code execution by a low-privileged attacker. Each has a CVSS score of 9.9, Critical severity. CVE-2026-104350 is a reflected cross-site scripting flaw that can take over a victim's account or session. It has a CVSS score of 9.3, Critical severity. CVE-2026-104354 is an SQL injection that gives a high-privileged attacker code execution, and CVE-2026-105779 is an SQL injection that bypasses security controls for unauthorized read and limited write access. Each has a CVSS score of 9.1, Critical severity.

Adobe Campaign Classic receives a security update that fixes eight Critical vulnerabilities. Together they let attackers inject code and OS commands, run arbitrary SQL, get around authorization checks, and hijack user sessions. Most need only low privileges and no user interaction, and every flaw has a changed scope, so a compromise can reach well past the vulnerable component. That puts the platform's customer data and campaign infrastructure at direct risk.

The update covers these issues. CVE-2026-105781 is an SQL injection that lets attackers run arbitrary SQL commands. It has a CVSS score of 10.0, Critical severity. CVE-2026-104351 (code injection), CVE-2026-104353 (OS command injection), CVE-2026-105489 (SQL injection) and CVE-2026-105780 (incorrect authorization) each lead to arbitrary code execution by a low-privileged attacker. Each has a CVSS score of 9.9, Critical severity. CVE-2026-104350 is a reflected cross-site scripting flaw that can take over a victim's account or session. It has a CVSS score of 9.3, Critical severity. CVE-2026-104354 is an SQL injection that gives a high-privileged attacker code execution, and CVE-2026-105779 is an SQL injection that bypasses security controls for unauthorized read and limited write access. Each has a CVSS score of 9.1, Critical severity.

Adobe has released a security update for Adobe Connect Desktop App that fixes a code injection flaw. The flaw lets an attacker run arbitrary code in the context of the current user. CVE-2026-48360 has a CVSS score of 9.6, Critical severity.

To trigger the flaw, the victim must visit a maliciously crafted URL or interact with a compromised web page. Its impact can reach beyond the vulnerable component, so a successful attack can affect other resources. This update stops a single user click from leading to remote code execution.

Apple has released security updates for Apple iOS and iPadOS that fix two Critical vulnerabilities, with the same fixes delivered across macOS, tvOS, visionOS, and watchOS. CVE-2026-112690 has a CVSS score of 9.8, Critical severity. It is an input validation flaw that lets a remote attacker break out of the WebContent sandbox, removing a core barrier between hostile web content and the rest of the device. CVE-2026-112514 has a CVSS score of 9.1, Critical severity. It is a use-after-free flaw that lets an attacker crash the system or corrupt kernel memory.

The fixes ship in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Together, these flaws expose company phones, tablets, and Macs to sandbox escape and kernel-level compromise, so these updates should be deployed the same day.

Apple has released security updates for Apple iOS and iPadOS that fix two Critical vulnerabilities, with the same fixes delivered across macOS, tvOS, visionOS, and watchOS. CVE-2026-112690 has a CVSS score of 9.8, Critical severity. It is an input validation flaw that lets a remote attacker break out of the WebContent sandbox, removing a core barrier between hostile web content and the rest of the device. CVE-2026-112514 has a CVSS score of 9.1, Critical severity. It is a use-after-free flaw that lets an attacker crash the system or corrupt kernel memory.

The fixes ship in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Together, these flaws expose company phones, tablets, and Macs to sandbox escape and kernel-level compromise, so these updates should be deployed the same day.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple macOS receives fixes for nine Critical vulnerabilities in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. The flaws let a malicious app corrupt process memory, read kernel memory, or crash the system. Three separate bugs let apps or sandboxed processes break out of their sandbox. A remote attacker can force apps to terminate, an attacker who controls a network file server can crash the system, and an authentication flaw lets an attacker impersonate other users. One sandbox escape, a path traversal flaw, is fixed only in the Golden Gate release line.

CVE-2026-112526, CVE-2026-112552, and CVE-2026-84539 each have a CVSS score of 9.8, Critical severity. CVE-2026-112521 has a CVSS score of 9.3, Critical severity. CVE-2026-112443 and CVE-2026-86868 each have a CVSS score of 9.1, Critical severity. CVE-2026-112478, CVE-2026-112497, and CVE-2026-84633 each have a CVSS score of 9.0, Critical severity.

Apple has released an update for Apple Safari that closes a sandbox escape in the browser's Web Content process. CVE-2026-113897 has a CVSS score of 10.0, Critical severity. A remote attacker may be able to break out of the Web Content sandbox. That sandbox is the main barrier between hostile web content and the rest of the system.

Apple fixed the flaw by removing the vulnerable code. The fix ships in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2. Organizations should deploy these updates the same day across every managed Apple device.

This Barracuda Email Security Gateway (ESG) update fixes two serious flaws in the appliance that screens an organization's email. CVE-2026-116606 has a CVSS score of 9.3, Critical severity. It is an authentication bypass in versions earlier than 9.4.0.030 that lets an unauthenticated remote attacker reach a configuration-import function and restore a crafted backup archive, which takes over the appliance's global configuration. CVE-2026-111560 has a CVSS score of 8.6, High severity. It is an OS command injection in the timezone configuration field that lets an authenticated administrator run commands with root privileges.

Together, the two flaws give an attacker a direct path to full control of the email gateway: the bypass opens the configuration to outsiders, and the command injection turns administrative access into root-level code execution. Update affected appliances to version 9.4.0.030 or later.

This Barracuda Email Security Gateway (ESG) update fixes two serious flaws in the appliance that screens an organization's email. CVE-2026-116606 has a CVSS score of 9.3, Critical severity. It is an authentication bypass in versions earlier than 9.4.0.030 that lets an unauthenticated remote attacker reach a configuration-import function and restore a crafted backup archive, which takes over the appliance's global configuration. CVE-2026-111560 has a CVSS score of 8.6, High severity. It is an OS command injection in the timezone configuration field that lets an authenticated administrator run commands with root privileges.

Together, the two flaws give an attacker a direct path to full control of the email gateway: the bypass opens the configuration to outsiders, and the command injection turns administrative access into root-level code execution. Update affected appliances to version 9.4.0.030 or later.

ClickHouse has released a security update that fixes a critical remote code execution flaw in ClickHouse Server. CVE-2026-116366 has a CVSS score of 9.5, Critical severity. An integer overflow lets an unauthenticated attacker with network access execute arbitrary code on the server under certain conditions.

No credentials are required, so any exposed ClickHouse Server is a direct entry point. A successful attack puts the data the server holds and the systems around it at risk. Apply this update the same day.

This curl update fixes seven Critical flaws in how curl and libcurl handle authentication, connection reuse, and certificate pinning. CVE-2026-86411, CVE-2026-86413, CVE-2026-86414, CVE-2026-87861, CVE-2026-87866, CVE-2026-92388, and CVE-2026-94265 each have a CVSS score of 9.1, Critical severity. Most of the flaws leak or misuse credentials. A malicious server can use a redirect to collect Negotiate and Kerberos credentials. A malicious proxy can collect Basic passwords and Kerberos tickets. Reused connections can carry one origin's authenticated identity over to another origin, and pooled FTP connections can keep a client certificate identity that a later transfer should not have.

The patch also fixes a public-key pinning bypass in wolfSSL builds, which lets curl accept a key the TLS peer does not hold. It also fixes a memory-safety flaw that follows a failed FTP wildcard listing and can lead to a crash, a use-after-free, or type confusion. Proof-of-concept code exists for all seven vulnerabilities. Because curl is built into a wide range of applications, scripts, and devices, this patch should be deployed the same day.

This curl update fixes seven Critical flaws in how curl and libcurl handle authentication, connection reuse, and certificate pinning. CVE-2026-86411, CVE-2026-86413, CVE-2026-86414, CVE-2026-87861, CVE-2026-87866, CVE-2026-92388, and CVE-2026-94265 each have a CVSS score of 9.1, Critical severity. Most of the flaws leak or misuse credentials. A malicious server can use a redirect to collect Negotiate and Kerberos credentials. A malicious proxy can collect Basic passwords and Kerberos tickets. Reused connections can carry one origin's authenticated identity over to another origin, and pooled FTP connections can keep a client certificate identity that a later transfer should not have.

The patch also fixes a public-key pinning bypass in wolfSSL builds, which lets curl accept a key the TLS peer does not hold. It also fixes a memory-safety flaw that follows a failed FTP wildcard listing and can lead to a crash, a use-after-free, or type confusion. Proof-of-concept code exists for all seven vulnerabilities. Because curl is built into a wide range of applications, scripts, and devices, this patch should be deployed the same day.

This curl update fixes seven Critical flaws in how curl and libcurl handle authentication, connection reuse, and certificate pinning. CVE-2026-86411, CVE-2026-86413, CVE-2026-86414, CVE-2026-87861, CVE-2026-87866, CVE-2026-92388, and CVE-2026-94265 each have a CVSS score of 9.1, Critical severity. Most of the flaws leak or misuse credentials. A malicious server can use a redirect to collect Negotiate and Kerberos credentials. A malicious proxy can collect Basic passwords and Kerberos tickets. Reused connections can carry one origin's authenticated identity over to another origin, and pooled FTP connections can keep a client certificate identity that a later transfer should not have.

The patch also fixes a public-key pinning bypass in wolfSSL builds, which lets curl accept a key the TLS peer does not hold. It also fixes a memory-safety flaw that follows a failed FTP wildcard listing and can lead to a crash, a use-after-free, or type confusion. Proof-of-concept code exists for all seven vulnerabilities. Because curl is built into a wide range of applications, scripts, and devices, this patch should be deployed the same day.

This curl update fixes seven Critical flaws in how curl and libcurl handle authentication, connection reuse, and certificate pinning. CVE-2026-86411, CVE-2026-86413, CVE-2026-86414, CVE-2026-87861, CVE-2026-87866, CVE-2026-92388, and CVE-2026-94265 each have a CVSS score of 9.1, Critical severity. Most of the flaws leak or misuse credentials. A malicious server can use a redirect to collect Negotiate and Kerberos credentials. A malicious proxy can collect Basic passwords and Kerberos tickets. Reused connections can carry one origin's authenticated identity over to another origin, and pooled FTP connections can keep a client certificate identity that a later transfer should not have.

The patch also fixes a public-key pinning bypass in wolfSSL builds, which lets curl accept a key the TLS peer does not hold. It also fixes a memory-safety flaw that follows a failed FTP wildcard listing and can lead to a crash, a use-after-free, or type confusion. Proof-of-concept code exists for all seven vulnerabilities. Because curl is built into a wide range of applications, scripts, and devices, this patch should be deployed the same day.

This curl update fixes seven Critical flaws in how curl and libcurl handle authentication, connection reuse, and certificate pinning. CVE-2026-86411, CVE-2026-86413, CVE-2026-86414, CVE-2026-87861, CVE-2026-87866, CVE-2026-92388, and CVE-2026-94265 each have a CVSS score of 9.1, Critical severity. Most of the flaws leak or misuse credentials. A malicious server can use a redirect to collect Negotiate and Kerberos credentials. A malicious proxy can collect Basic passwords and Kerberos tickets. Reused connections can carry one origin's authenticated identity over to another origin, and pooled FTP connections can keep a client certificate identity that a later transfer should not have.

The patch also fixes a public-key pinning bypass in wolfSSL builds, which lets curl accept a key the TLS peer does not hold. It also fixes a memory-safety flaw that follows a failed FTP wildcard listing and can lead to a crash, a use-after-free, or type confusion. Proof-of-concept code exists for all seven vulnerabilities. Because curl is built into a wide range of applications, scripts, and devices, this patch should be deployed the same day.

This curl update fixes seven Critical flaws in how curl and libcurl handle authentication, connection reuse, and certificate pinning. CVE-2026-86411, CVE-2026-86413, CVE-2026-86414, CVE-2026-87861, CVE-2026-87866, CVE-2026-92388, and CVE-2026-94265 each have a CVSS score of 9.1, Critical severity. Most of the flaws leak or misuse credentials. A malicious server can use a redirect to collect Negotiate and Kerberos credentials. A malicious proxy can collect Basic passwords and Kerberos tickets. Reused connections can carry one origin's authenticated identity over to another origin, and pooled FTP connections can keep a client certificate identity that a later transfer should not have.

The patch also fixes a public-key pinning bypass in wolfSSL builds, which lets curl accept a key the TLS peer does not hold. It also fixes a memory-safety flaw that follows a failed FTP wildcard listing and can lead to a crash, a use-after-free, or type confusion. Proof-of-concept code exists for all seven vulnerabilities. Because curl is built into a wide range of applications, scripts, and devices, this patch should be deployed the same day.

This curl update fixes seven Critical flaws in how curl and libcurl handle authentication, connection reuse, and certificate pinning. CVE-2026-86411, CVE-2026-86413, CVE-2026-86414, CVE-2026-87861, CVE-2026-87866, CVE-2026-92388, and CVE-2026-94265 each have a CVSS score of 9.1, Critical severity. Most of the flaws leak or misuse credentials. A malicious server can use a redirect to collect Negotiate and Kerberos credentials. A malicious proxy can collect Basic passwords and Kerberos tickets. Reused connections can carry one origin's authenticated identity over to another origin, and pooled FTP connections can keep a client certificate identity that a later transfer should not have.

The patch also fixes a public-key pinning bypass in wolfSSL builds, which lets curl accept a key the TLS peer does not hold. It also fixes a memory-safety flaw that follows a failed FTP wildcard listing and can lead to a crash, a use-after-free, or type confusion. Proof-of-concept code exists for all seven vulnerabilities. Because curl is built into a wide range of applications, scripts, and devices, this patch should be deployed the same day.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain receives a security update that fixes 15 vulnerabilities across Feature Release versions 7.7.1.0 through 8.8 and the LTS2024, LTS2025, and LTS2026 release lines. Four flaws are Critical and need no login. An attacker with remote access can execute commands through a stack-based buffer overflow, expose credentials through a hard-coded cryptographic key, create privileged accounts, or run arbitrary commands with root privileges. Together, these flaws give an attacker complete control of the backup appliance. The remaining eleven High-severity flaws include OS command injection, buffer and integer overflows, path traversal, authentication bypass, and privilege escalation. They lead to command execution, filesystem access, protection bypass, and denial of service.

CVE-2026-103780, CVE-2026-86384, CVE-2026-86397, and CVE-2026-86400 each have a CVSS score of 9.8, Critical severity. CVE-2026-86378, CVE-2026-86396, and CVE-2026-86398 each have a CVSS score of 8.8, High severity. CVE-2026-103779 has a CVSS score of 8.3, High severity. CVE-2026-86377 has a CVSS score of 7.6, High severity. CVE-2026-110541, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, and CVE-2026-86399 each have a CVSS score of 7.2, High severity.

Dell PowerProtect Data Domain Management Center has received a security update that fixes five vulnerabilities in Feature Release versions 7.7.1.0 through 8.8 and in the LTS2024, LTS2025, and LTS2026 release lines. A remote attacker with low privileges can use the most serious of these flaws to bypass authentication, inject SQL, and run unauthorized operations on the Data Domain systems the console manages. The flaws expose the core of an organization's backup and recovery infrastructure.

CVE-2026-103792 (SQL injection) has a CVSS score of 9.6, Critical severity. CVE-2026-103799 (missing authorization) has a CVSS score of 9.6, Critical severity. CVE-2026-90717 (authentication bypass by spoofing that leads to elevation of privileges and can affect other managed Data Domain systems) has a CVSS score of 9.1, Critical severity. CVE-2026-86379 (OS command injection that a high-privileged attacker can use to run commands) has a CVSS score of 7.2, High severity. CVE-2026-110540 (missing authorization) has a CVSS score of 7.1, High severity.

Dell PowerProtect Data Domain Management Center has received a security update that fixes five vulnerabilities in Feature Release versions 7.7.1.0 through 8.8 and in the LTS2024, LTS2025, and LTS2026 release lines. A remote attacker with low privileges can use the most serious of these flaws to bypass authentication, inject SQL, and run unauthorized operations on the Data Domain systems the console manages. The flaws expose the core of an organization's backup and recovery infrastructure.

CVE-2026-103792 (SQL injection) has a CVSS score of 9.6, Critical severity. CVE-2026-103799 (missing authorization) has a CVSS score of 9.6, Critical severity. CVE-2026-90717 (authentication bypass by spoofing that leads to elevation of privileges and can affect other managed Data Domain systems) has a CVSS score of 9.1, Critical severity. CVE-2026-86379 (OS command injection that a high-privileged attacker can use to run commands) has a CVSS score of 7.2, High severity. CVE-2026-110540 (missing authorization) has a CVSS score of 7.1, High severity.

Dell PowerProtect Data Domain Management Center has received a security update that fixes five vulnerabilities in Feature Release versions 7.7.1.0 through 8.8 and in the LTS2024, LTS2025, and LTS2026 release lines. A remote attacker with low privileges can use the most serious of these flaws to bypass authentication, inject SQL, and run unauthorized operations on the Data Domain systems the console manages. The flaws expose the core of an organization's backup and recovery infrastructure.

CVE-2026-103792 (SQL injection) has a CVSS score of 9.6, Critical severity. CVE-2026-103799 (missing authorization) has a CVSS score of 9.6, Critical severity. CVE-2026-90717 (authentication bypass by spoofing that leads to elevation of privileges and can affect other managed Data Domain systems) has a CVSS score of 9.1, Critical severity. CVE-2026-86379 (OS command injection that a high-privileged attacker can use to run commands) has a CVSS score of 7.2, High severity. CVE-2026-110540 (missing authorization) has a CVSS score of 7.1, High severity.

Dell PowerProtect Data Domain Management Center has received a security update that fixes five vulnerabilities in Feature Release versions 7.7.1.0 through 8.8 and in the LTS2024, LTS2025, and LTS2026 release lines. A remote attacker with low privileges can use the most serious of these flaws to bypass authentication, inject SQL, and run unauthorized operations on the Data Domain systems the console manages. The flaws expose the core of an organization's backup and recovery infrastructure.

CVE-2026-103792 (SQL injection) has a CVSS score of 9.6, Critical severity. CVE-2026-103799 (missing authorization) has a CVSS score of 9.6, Critical severity. CVE-2026-90717 (authentication bypass by spoofing that leads to elevation of privileges and can affect other managed Data Domain systems) has a CVSS score of 9.1, Critical severity. CVE-2026-86379 (OS command injection that a high-privileged attacker can use to run commands) has a CVSS score of 7.2, High severity. CVE-2026-110540 (missing authorization) has a CVSS score of 7.1, High severity.

Dell PowerProtect Data Domain Management Center has received a security update that fixes five vulnerabilities in Feature Release versions 7.7.1.0 through 8.8 and in the LTS2024, LTS2025, and LTS2026 release lines. A remote attacker with low privileges can use the most serious of these flaws to bypass authentication, inject SQL, and run unauthorized operations on the Data Domain systems the console manages. The flaws expose the core of an organization's backup and recovery infrastructure.

CVE-2026-103792 (SQL injection) has a CVSS score of 9.6, Critical severity. CVE-2026-103799 (missing authorization) has a CVSS score of 9.6, Critical severity. CVE-2026-90717 (authentication bypass by spoofing that leads to elevation of privileges and can affect other managed Data Domain systems) has a CVSS score of 9.1, Critical severity. CVE-2026-86379 (OS command injection that a high-privileged attacker can use to run commands) has a CVSS score of 7.2, High severity. CVE-2026-110540 (missing authorization) has a CVSS score of 7.1, High severity.

Dell Wyse Management Suite has a critical cross-site scripting flaw in versions before 2609.0.0.155. CVE-2026-82158 has a CVSS score of 9.0, Critical severity. A remote attacker with only low privileges can inject script into the management console's web pages. That script runs in the browsers of other users who open those pages, including administrators who control the managed thin-client fleet.

The update to version 2609.0.0.155 or later fixes the flaw by properly neutralizing input before the console renders it. Because this console is the central control point for endpoint configuration, organizations should treat it as a high-value target and apply the update the same day.

Docker Desktop for Windows with the WSL2 backend has a container-isolation flaw. CVE-2026-112917 has a CVSS score of 9.2, Critical severity. An unprivileged Linux container can use 32-bit socketcall to get around the default seccomp restriction on AF_VSOCK. That exposes services facing the host and Windows files that the logged-in user can access. The flaw affects x86-64 WSL2 deployments. LinuxKit-based backends are not affected.

The fix needs two updates: Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Docker Desktop 4.98.0 on an older version of WSL is still vulnerable, so update both components together to close the gap.

Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux have a SQL injection flaw. A remote attacker who can access a service can use it to run database functions that should be blocked. If the service is set to public access, which is not the default, that attacker can be anonymous. CVE-2026-10757 has a CVSS score of 9.8, Critical severity.

Esri has released a patch for ArcGIS Server versions 12.1, 12.0, 11.5, 11.3, and 11.1, which are in General Availability or Extended support. Versions in mature or retired status are not eligible for the patch. Organizations on those versions must upgrade to a supported release and then apply the patch.

Fortinet has released a security update for Fortinet FortiSandbox that closes a critical authentication bypass flaw. CVE-2026-107656 has a CVSS score of 9.6, Critical severity. Attackers can skip authentication by using an alternate path or channel, then send crafted HTTP requests to run unauthorized code or commands, which gives them elevated privileges on the appliance.

The flaw affects FortiSandbox 5.0.0 through 5.0.6, 4.4.0 through 4.4.9, and all 4.2 versions, plus FortiSandbox PaaS 5.0.0 through 5.0.6 and all PaaS 4.4 and 4.2 versions. FortiSandbox analyzes suspicious files across the security stack, so a compromised appliance weakens threat detection across the whole organization.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

The FreeRDP update fixes 20 vulnerabilities across the client, server, proxy, and RD Gateway components. Version 3.32.2 covers all of them. Most are memory corruption flaws: heap overflows, out-of-bounds writes, use-after-free, and integer wraparounds. A malicious RDP server, client, or gateway can trigger them through audio, graphics, clipboard, smartcard, and authentication handling, leading to crashes or code execution. One flaw lets unauthenticated attackers inject keystrokes into a shadow server session. Another weakens certificate validation, so a man-in-the-middle can intercept RDP sessions, including keystrokes, clipboard data, and screen content. Proof-of-concept code exists for 14 of the 20 flaws, including both Critical ones.

CVE-2026-121952 and CVE-2026-121953 each have a CVSS score of 9.8, Critical severity. CVE-2026-109676, CVE-2026-111380, CVE-2026-111382, CVE-2026-114045, and CVE-2026-121958 each have a CVSS score of 8.8, High severity. CVE-2026-121962 has a CVSS score of 8.1, High severity. CVE-2026-111881 has a CVSS score of 7.6, High severity. CVE-2026-110838, CVE-2026-121955, CVE-2026-121956, CVE-2026-121957, and CVE-2026-121964 each have a CVSS score of 7.5, High severity. CVE-2026-111880 and CVE-2026-121392 each have a CVSS score of 7.4, High severity. CVE-2026-111379 and CVE-2026-111381 each have a CVSS score of 7.3, High severity. CVE-2026-110837 and CVE-2026-110839 each have a CVSS score of 7.1, High severity.

GLPI updates close three access-control flaws in the IT asset and service management platform. CVE-2026-52848 has a CVSS score of 9.2, Critical severity: during login, an unauthenticated user can use a crafted URL to skip one-time-password verification and defeat two-factor authentication in versions 11.0.0 through 11.0.7. CVE-2026-121559 has a CVSS score of 7.2, High severity: a user with the Technician profile can clone a Super-Admin account with a new login and password, because profile and group assignments are copied without permission checks, giving the attacker a Super-Admin account they control. CVE-2026-57152 has a CVSS score of 7.1, High severity: GLPI permission logic can grant access to a document without confirming it is linked to the targeted item, exposing files to users who should not see them.

Versions 10.0.28 and 11.0.10 fix all three flaws. Together, these flaws let attackers bypass MFA, escalate to full administrative control, and read restricted documents across the asset and ticketing data GLPI holds. Update immediately to the latest release in your branch.

GLPI updates close three access-control flaws in the IT asset and service management platform. CVE-2026-52848 has a CVSS score of 9.2, Critical severity: during login, an unauthenticated user can use a crafted URL to skip one-time-password verification and defeat two-factor authentication in versions 11.0.0 through 11.0.7. CVE-2026-121559 has a CVSS score of 7.2, High severity: a user with the Technician profile can clone a Super-Admin account with a new login and password, because profile and group assignments are copied without permission checks, giving the attacker a Super-Admin account they control. CVE-2026-57152 has a CVSS score of 7.1, High severity: GLPI permission logic can grant access to a document without confirming it is linked to the targeted item, exposing files to users who should not see them.

Versions 10.0.28 and 11.0.10 fix all three flaws. Together, these flaws let attackers bypass MFA, escalate to full administrative control, and read restricted documents across the asset and ticketing data GLPI holds. Update immediately to the latest release in your branch.

GLPI updates close three access-control flaws in the IT asset and service management platform. CVE-2026-52848 has a CVSS score of 9.2, Critical severity: during login, an unauthenticated user can use a crafted URL to skip one-time-password verification and defeat two-factor authentication in versions 11.0.0 through 11.0.7. CVE-2026-121559 has a CVSS score of 7.2, High severity: a user with the Technician profile can clone a Super-Admin account with a new login and password, because profile and group assignments are copied without permission checks, giving the attacker a Super-Admin account they control. CVE-2026-57152 has a CVSS score of 7.1, High severity: GLPI permission logic can grant access to a document without confirming it is linked to the targeted item, exposing files to users who should not see them.

Versions 10.0.28 and 11.0.10 fix all three flaws. Together, these flaws let attackers bypass MFA, escalate to full administrative control, and read restricted documents across the asset and ticketing data GLPI holds. Update immediately to the latest release in your branch.

Google Android receives a patch for four Critical vulnerabilities in its image and media handling code. CVE-2026-58868, CVE-2026-58876, CVE-2026-58936, and CVE-2026-58968 each have a CVSS score of 9.8, Critical severity. CVE-2026-58868 is a heap buffer overflow in the frame decoder that allows an out-of-bounds write and leads to remote code execution. CVE-2026-58876 is a use-after-free memory safety issue in multiple locations that leads to remote code execution. CVE-2026-58936 is a use-after-free in PNG handling that corrupts memory and leads to remote code execution. CVE-2026-58968 is a double free in metadata parsing that leads to remote escalation of privilege.

None of the four flaws require additional execution privileges or any user interaction, so a remote attacker can reach them without tricking the device owner. The patch closes all four. Unpatched Android devices carry a direct path to remote compromise and should be updated across the fleet without delay.

Google Android receives a patch for four Critical vulnerabilities in its image and media handling code. CVE-2026-58868, CVE-2026-58876, CVE-2026-58936, and CVE-2026-58968 each have a CVSS score of 9.8, Critical severity. CVE-2026-58868 is a heap buffer overflow in the frame decoder that allows an out-of-bounds write and leads to remote code execution. CVE-2026-58876 is a use-after-free memory safety issue in multiple locations that leads to remote code execution. CVE-2026-58936 is a use-after-free in PNG handling that corrupts memory and leads to remote code execution. CVE-2026-58968 is a double free in metadata parsing that leads to remote escalation of privilege.

None of the four flaws require additional execution privileges or any user interaction, so a remote attacker can reach them without tricking the device owner. The patch closes all four. Unpatched Android devices carry a direct path to remote compromise and should be updated across the fleet without delay.

Google Android receives a patch for four Critical vulnerabilities in its image and media handling code. CVE-2026-58868, CVE-2026-58876, CVE-2026-58936, and CVE-2026-58968 each have a CVSS score of 9.8, Critical severity. CVE-2026-58868 is a heap buffer overflow in the frame decoder that allows an out-of-bounds write and leads to remote code execution. CVE-2026-58876 is a use-after-free memory safety issue in multiple locations that leads to remote code execution. CVE-2026-58936 is a use-after-free in PNG handling that corrupts memory and leads to remote code execution. CVE-2026-58968 is a double free in metadata parsing that leads to remote escalation of privilege.

None of the four flaws require additional execution privileges or any user interaction, so a remote attacker can reach them without tricking the device owner. The patch closes all four. Unpatched Android devices carry a direct path to remote compromise and should be updated across the fleet without delay.

Google Android receives a patch for four Critical vulnerabilities in its image and media handling code. CVE-2026-58868, CVE-2026-58876, CVE-2026-58936, and CVE-2026-58968 each have a CVSS score of 9.8, Critical severity. CVE-2026-58868 is a heap buffer overflow in the frame decoder that allows an out-of-bounds write and leads to remote code execution. CVE-2026-58876 is a use-after-free memory safety issue in multiple locations that leads to remote code execution. CVE-2026-58936 is a use-after-free in PNG handling that corrupts memory and leads to remote code execution. CVE-2026-58968 is a double free in metadata parsing that leads to remote escalation of privilege.

None of the four flaws require additional execution privileges or any user interaction, so a remote attacker can reach them without tricking the device owner. The patch closes all four. Unpatched Android devices carry a direct path to remote compromise and should be updated across the fleet without delay.

This JetBrains Toolbox App update fixes CVE-2026-118697, which has a CVSS score of 9.0, Critical severity. The jetbrainsd daemon trusted compromised intermediate certificates, an improper certificate validation flaw that allows elevation of privilege. The flaw affects Toolbox App before 3.9.1 and 3.8.2, as well as IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand, Rider, CLion, DataGrip and RustRover before their fixed releases.

Developer workstations run with broad access to source code, credentials and build systems. A daemon that accepts forged trust lets an attacker raise privileges on those machines. Update Toolbox App and every affected JetBrains IDE to the fixed versions.

Mozilla Thunderbird updates fix two Critical vulnerabilities that let remote attackers act as the user and steal credentials. CVE-2026-113867 has a CVSS score of 9.1, Critical severity. Thunderbird did not escape attribute values in outgoing XMPP chat stanzas, so a remote XMPP user can inject stanzas into the user's connection with no interaction. Attackers can then send messages and change contact and subscription settings as the user. This flaw affects only Thunderbird's chat feature with XMPP accounts and is fixed in Thunderbird 158.0.1 and 153.5.1.

CVE-2026-118177 has a CVSS score of 9.1, Critical severity. During calendar discovery, Thunderbird accepted calendar locations that pointed to other servers, local files, or network shares. A malicious server, or a network attacker when the lookup uses plain HTTP, can force a subscription to such a location. On Windows, this leaks the user's NTLM credentials to an attacker-controlled host on every calendar refresh, and calendar changes can be written to the attacker's share or overwrite a local file. This flaw is fixed in Thunderbird 159 and 153.6.

Mozilla Thunderbird updates fix two Critical vulnerabilities that let remote attackers act as the user and steal credentials. CVE-2026-113867 has a CVSS score of 9.1, Critical severity. Thunderbird did not escape attribute values in outgoing XMPP chat stanzas, so a remote XMPP user can inject stanzas into the user's connection with no interaction. Attackers can then send messages and change contact and subscription settings as the user. This flaw affects only Thunderbird's chat feature with XMPP accounts and is fixed in Thunderbird 158.0.1 and 153.5.1.

CVE-2026-118177 has a CVSS score of 9.1, Critical severity. During calendar discovery, Thunderbird accepted calendar locations that pointed to other servers, local files, or network shares. A malicious server, or a network attacker when the lookup uses plain HTTP, can force a subscription to such a location. On Windows, this leaks the user's NTLM credentials to an attacker-controlled host on every calendar refresh, and calendar changes can be written to the attacker's share or overwrite a local file. This flaw is fixed in Thunderbird 159 and 153.6.

NoMachine has three vulnerabilities that open the door to remote code execution and full SYSTEM takeover. The most severe, CVE-2026-114549, has a CVSS score of 9.8, Critical severity. It is a heap-based buffer overflow in the nxwebrunner web service, which listens on TCP port 4443 by default, and it lets unauthenticated remote attackers run code as the service account. CVE-2026-92208 has a CVSS score of 8.8, High severity. It is a heap-based buffer overflow in mDNS record parsing that lets unauthenticated attackers on the adjacent network execute code as the service account.

CVE-2026-111184 has a CVSS score of 7.8, High severity. Incorrect permissions on a named pipe in the NoMachine Device Service let a local attacker who already runs low-privileged code escalate to SYSTEM. Together, these flaws give attackers a path from network access to complete control of the host. Patch all NoMachine installations now, starting with systems that expose the web service.

NoMachine has three vulnerabilities that open the door to remote code execution and full SYSTEM takeover. The most severe, CVE-2026-114549, has a CVSS score of 9.8, Critical severity. It is a heap-based buffer overflow in the nxwebrunner web service, which listens on TCP port 4443 by default, and it lets unauthenticated remote attackers run code as the service account. CVE-2026-92208 has a CVSS score of 8.8, High severity. It is a heap-based buffer overflow in mDNS record parsing that lets unauthenticated attackers on the adjacent network execute code as the service account.

CVE-2026-111184 has a CVSS score of 7.8, High severity. Incorrect permissions on a named pipe in the NoMachine Device Service let a local attacker who already runs low-privileged code escalate to SYSTEM. Together, these flaws give attackers a path from network access to complete control of the host. Patch all NoMachine installations now, starting with systems that expose the web service.

NoMachine has three vulnerabilities that open the door to remote code execution and full SYSTEM takeover. The most severe, CVE-2026-114549, has a CVSS score of 9.8, Critical severity. It is a heap-based buffer overflow in the nxwebrunner web service, which listens on TCP port 4443 by default, and it lets unauthenticated remote attackers run code as the service account. CVE-2026-92208 has a CVSS score of 8.8, High severity. It is a heap-based buffer overflow in mDNS record parsing that lets unauthenticated attackers on the adjacent network execute code as the service account.

CVE-2026-111184 has a CVSS score of 7.8, High severity. Incorrect permissions on a named pipe in the NoMachine Device Service let a local attacker who already runs low-privileged code escalate to SYSTEM. Together, these flaws give attackers a path from network access to complete control of the host. Patch all NoMachine installations now, starting with systems that expose the web service.

Oracle Java SE has two Critical vulnerabilities, and this update fixes both. CVE-2026-114820 has a CVSS score of 9.1, Critical severity. CVE-2026-91403 has a CVSS score of 9.1, Critical severity.

Java SE runs underneath a wide range of business applications on servers and endpoints. With two flaws scored this high, apply the update the same day to every system that runs Java SE.

Oracle Java SE has two Critical vulnerabilities, and this update fixes both. CVE-2026-114820 has a CVSS score of 9.1, Critical severity. CVE-2026-91403 has a CVSS score of 9.1, Critical severity.

Java SE runs underneath a wide range of business applications on servers and endpoints. With two flaws scored this high, apply the update the same day to every system that runs Java SE.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

This Oracle SOA Suite update fixes fifteen vulnerabilities, and every one of them is rated Critical. Three reach the maximum score: CVE-2026-91216, CVE-2026-91221, and CVE-2026-91231 each have a CVSS score of 10.0, Critical severity. CVE-2026-91224, CVE-2026-91232, CVE-2026-91250, and CVE-2026-91251 each have a CVSS score of 9.9, Critical severity. CVE-2026-91214, CVE-2026-91233, CVE-2026-91234, CVE-2026-91235, and CVE-2026-91236 each have a CVSS score of 9.8, Critical severity.

CVE-2026-91218 has a CVSS score of 9.6, Critical severity. CVE-2026-91230 has a CVSS score of 9.3, Critical severity. CVE-2026-91225 has a CVSS score of 9.1, Critical severity. Oracle SOA Suite links core business applications and workflows, so this many top-tier flaws in a single product puts integration infrastructure at serious risk. Apply the update the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

pgAdmin 4 version 9.19 fixes nine vulnerabilities in server mode. Together they let attackers take over accounts, borrow the pgAdmin service account's credentials, and run commands on the pgAdmin host. The most serious, CVE-2026-116241, has a CVSS score of 9.9, Critical severity. It lets an ordinary database user slip a command past the Import/Export Data tool, and pgAdmin then runs that command on its host under the account that runs pgAdmin. A second set of flaws lets attackers get around login protections. CVE-2026-116238 has a CVSS score of 8.1, High severity: it removes the lockout on failed logins, so an unauthenticated attacker can keep guessing passwords on any internal account, including the administrator's. CVE-2026-116239 has a CVSS score of 8.5, High severity: it lets an LDAP or Kerberos user sign in as another account, including the administrator.

The remaining High-severity fixes stop server-mode users from reaching credentials and files that belong to the service account or to other users. CVE-2026-116242 has a CVSS score of 8.2, High severity, and exposes the service account's SSH keys and agent. CVE-2026-116244 has a CVSS score of 8.2, High severity, and exposes its Kerberos tickets. CVE-2026-116245 has a CVSS score of 8.2, High severity, and exposes its connection service entries and password variables. CVE-2026-116247 has a CVSS score of 8.2, High severity, and exposes its saved password files and client certificates. CVE-2026-116249 has a CVSS score of 8.4, High severity, and allows path traversal into other users' password files, certificates, and SSH keys. CVE-2026-116243 has a CVSS score of 7.5, High severity, and lets a user run an uploaded executable from shared storage as the pgAdmin service account. Desktop mode is not affected by these flaws, but every server-mode deployment needs version 9.19.

• Treat any shared pgAdmin server as a privileged gateway to every database it connects to, and upgrade it the same day.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

Progress WS_FTP Server on Windows has nine vulnerabilities, six of them Critical. The fixes come in versions 2024.0.7 and 2025.0.4. The most serious is CVE-2026-84295, with a CVSS score of 10.0, Critical severity. It is an authentication flaw that lets an unauthenticated remote attacker obtain sensitive information, including administrative credentials. CVE-2026-90868 has a CVSS score of 9.9, Critical severity, and CVE-2026-90865 has a CVSS score of 9.0, Critical severity. Both are OS command injection flaws that enable arbitrary command execution, with elevated privileges in the case of CVE-2026-90865. CVE-2026-90863, CVE-2026-90864, and CVE-2026-90866 each have a CVSS score of 9.1, Critical severity. Through missing authorization and path traversal, they let a delegated Host Administrator exceed their scope, reach files outside it, and potentially run code or fully compromise the server.

The update also fixes three High-severity flaws. CVE-2026-90867 has a CVSS score of 8.1, High severity, and exposes Web Admin console functions to remote authentication attempts. CVE-2026-84294 has a CVSS score of 7.7, High severity, and is a path traversal flaw in the Ad Hoc Transfer component that lets an authenticated user reach files outside intended directories. CVE-2026-90869 has a CVSS score of 7.5, High severity, and lets a remote attacker who knows an enrolled SSH public key shut down the shared SSH service. Versions 2024.0.6 and 2025.0.3 fix only the first two of these issues. Upgrading to 2024.0.7 or 2025.0.4 closes all nine.

CPython's update fixes a critical certificate-trust weakness in its "ssl" module. CVE-2026-115557 has a CVSS score of 9.4, Critical severity. Without certificate revocation configured, Python applications could still trust certificates that are known to be compromised. That opens encrypted connections to impersonation and interception. The update adds a built-in denylist of known compromised certificates. Python now rejects them automatically, whatever the SSLContext policy says. Every service, script, and integration that relies on Python for secure connections gains this protection once it is updated.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

The Quest Foglight for Databases update fixes 13 vulnerabilities, and every one of them can give an attacker code execution with SYSTEM privileges. The three most serious need no authentication: CVE-2026-92188 (missing authentication in the ForgeMBeanServerSupport module), CVE-2026-92189 (external control of a file path in writeTopologySectionToFile), and CVE-2026-92190 (unsafe deserialization in the baseRmiServiceExporter bean) each have a CVSS score of 9.8, Critical severity. An unauthenticated remote attacker can use any of them to take full control of the host.

The update also fixes flaws that an authenticated user can exploit. Six directory traversal flaws affect file upload, license loading, and archive extraction: CVE-2026-92186, CVE-2026-92187, CVE-2026-92192, CVE-2026-92194, CVE-2026-92195, and CVE-2026-92197. Each has a CVSS score of 8.8, High severity. CVE-2026-92191, an incorrect authorization flaw in the runScript function, also has a CVSS score of 8.8, High severity. CVE-2026-92196, a server-side template injection flaw, has a CVSS score of 7.2, High severity. Two local privilege escalation flaws complete the release. CVE-2026-92199 comes from a hard-coded encryption key, and CVE-2026-92200 comes from incorrect folder permissions set by the installer. Each has a CVSS score of 7.8, High severity.

ServiceNow AI Platform has a sandbox escape flaw that lets an authenticated user with the admin role bypass Rhino sandbox restrictions and run arbitrary code on the underlying host operating system. That jump from application admin to the host opens the door to further unintended access beyond the platform itself. CVE-2026-103093 has a CVSS score of 9.4, Critical severity.

ServiceNow has deployed the fix to hosted instances and provided the update to partners and self-hosted customers. Self-hosted deployments must apply the update or upgrade to a patched release now to close this path to the host.

SolarWinds Dameware receives a security update that fixes two vulnerabilities in the remote administration platform. CVE-2026-28336 has a CVSS score of 9.9, Critical severity. It is a command injection flaw that lets an authenticated attacker compromise the remotely controlled host. CVE-2026-28327 has a CVSS score of 8.2, High severity. It is a DLL hijacking flaw that occurs during installation and enables elevation of privilege by an attacker with local access and admin privileges.

Dameware sits at the center of IT support operations with direct reach into managed endpoints, so a compromised session puts every connected host at risk. Apply this update the same day to close both paths.

SolarWinds Dameware receives a security update that fixes two vulnerabilities in the remote administration platform. CVE-2026-28336 has a CVSS score of 9.9, Critical severity. It is a command injection flaw that lets an authenticated attacker compromise the remotely controlled host. CVE-2026-28327 has a CVSS score of 8.2, High severity. It is a DLL hijacking flaw that occurs during installation and enables elevation of privilege by an attacker with local access and admin privileges.

Dameware sits at the center of IT support operations with direct reach into managed endpoints, so a compromised session puts every connected host at risk. Apply this update the same day to close both paths.

SUSE Rancher updates fix five vulnerabilities in Rancher Manager and Rancher Fleet. Four of them let users gain privileges, and one leaks credentials. The two Critical flaws pose the greatest risk. CVE-2026-88811 has a CVSS score of 9.1, Critical severity: missing filtering in the Rancher Manager meta proxy can leak Rancher credentials to cloud providers. CVE-2026-94290 has a CVSS score of 9.1, Critical severity: Fleet does not properly limit which kubeconfig secrets a cluster can reference, so an ordinary user can make the controller run their Fleet content on the management cluster with administrative privileges.

Three High-severity privilege escalation flaws complete the update. CVE-2024-22031 has a CVSS score of 8.5, High severity: a user can create a project with the same name as one in another cluster and gain access to it. CVE-2026-104615 has a CVSS score of 7.9, High severity: Fleet cluster registration does not tie a cluster's identity to its registration token, so a request can attach to a cluster registered with a different token. CVE-2026-88810 has a CVSS score of 7.2, High severity: the inheritedNamespacedRules field of a GlobalRole skips privilege-escalation checks, so a non-administrative user can receive permissions in downstream clusters beyond the ones they already hold.

SUSE Rancher updates fix five vulnerabilities in Rancher Manager and Rancher Fleet. Four of them let users gain privileges, and one leaks credentials. The two Critical flaws pose the greatest risk. CVE-2026-88811 has a CVSS score of 9.1, Critical severity: missing filtering in the Rancher Manager meta proxy can leak Rancher credentials to cloud providers. CVE-2026-94290 has a CVSS score of 9.1, Critical severity: Fleet does not properly limit which kubeconfig secrets a cluster can reference, so an ordinary user can make the controller run their Fleet content on the management cluster with administrative privileges.

Three High-severity privilege escalation flaws complete the update. CVE-2024-22031 has a CVSS score of 8.5, High severity: a user can create a project with the same name as one in another cluster and gain access to it. CVE-2026-104615 has a CVSS score of 7.9, High severity: Fleet cluster registration does not tie a cluster's identity to its registration token, so a request can attach to a cluster registered with a different token. CVE-2026-88810 has a CVSS score of 7.2, High severity: the inheritedNamespacedRules field of a GlobalRole skips privilege-escalation checks, so a non-administrative user can receive permissions in downstream clusters beyond the ones they already hold.

SUSE Rancher updates fix five vulnerabilities in Rancher Manager and Rancher Fleet. Four of them let users gain privileges, and one leaks credentials. The two Critical flaws pose the greatest risk. CVE-2026-88811 has a CVSS score of 9.1, Critical severity: missing filtering in the Rancher Manager meta proxy can leak Rancher credentials to cloud providers. CVE-2026-94290 has a CVSS score of 9.1, Critical severity: Fleet does not properly limit which kubeconfig secrets a cluster can reference, so an ordinary user can make the controller run their Fleet content on the management cluster with administrative privileges.

Three High-severity privilege escalation flaws complete the update. CVE-2024-22031 has a CVSS score of 8.5, High severity: a user can create a project with the same name as one in another cluster and gain access to it. CVE-2026-104615 has a CVSS score of 7.9, High severity: Fleet cluster registration does not tie a cluster's identity to its registration token, so a request can attach to a cluster registered with a different token. CVE-2026-88810 has a CVSS score of 7.2, High severity: the inheritedNamespacedRules field of a GlobalRole skips privilege-escalation checks, so a non-administrative user can receive permissions in downstream clusters beyond the ones they already hold.

SUSE Rancher updates fix five vulnerabilities in Rancher Manager and Rancher Fleet. Four of them let users gain privileges, and one leaks credentials. The two Critical flaws pose the greatest risk. CVE-2026-88811 has a CVSS score of 9.1, Critical severity: missing filtering in the Rancher Manager meta proxy can leak Rancher credentials to cloud providers. CVE-2026-94290 has a CVSS score of 9.1, Critical severity: Fleet does not properly limit which kubeconfig secrets a cluster can reference, so an ordinary user can make the controller run their Fleet content on the management cluster with administrative privileges.

Three High-severity privilege escalation flaws complete the update. CVE-2024-22031 has a CVSS score of 8.5, High severity: a user can create a project with the same name as one in another cluster and gain access to it. CVE-2026-104615 has a CVSS score of 7.9, High severity: Fleet cluster registration does not tie a cluster's identity to its registration token, so a request can attach to a cluster registered with a different token. CVE-2026-88810 has a CVSS score of 7.2, High severity: the inheritedNamespacedRules field of a GlobalRole skips privilege-escalation checks, so a non-administrative user can receive permissions in downstream clusters beyond the ones they already hold.

SUSE Rancher updates fix five vulnerabilities in Rancher Manager and Rancher Fleet. Four of them let users gain privileges, and one leaks credentials. The two Critical flaws pose the greatest risk. CVE-2026-88811 has a CVSS score of 9.1, Critical severity: missing filtering in the Rancher Manager meta proxy can leak Rancher credentials to cloud providers. CVE-2026-94290 has a CVSS score of 9.1, Critical severity: Fleet does not properly limit which kubeconfig secrets a cluster can reference, so an ordinary user can make the controller run their Fleet content on the management cluster with administrative privileges.

Three High-severity privilege escalation flaws complete the update. CVE-2024-22031 has a CVSS score of 8.5, High severity: a user can create a project with the same name as one in another cluster and gain access to it. CVE-2026-104615 has a CVSS score of 7.9, High severity: Fleet cluster registration does not tie a cluster's identity to its registration token, so a request can attach to a cluster registered with a different token. CVE-2026-88810 has a CVSS score of 7.2, High severity: the inheritedNamespacedRules field of a GlobalRole skips privilege-escalation checks, so a non-administrative user can receive permissions in downstream clusters beyond the ones they already hold.

Teltonika RUT devices and the wider RUTOS and TSWOS families have two serious command execution flaws. The update closes both. CVE-2026-82104 has a CVSS score of 9.4, Critical severity. It lets an unauthenticated user call internal LUA functions directly and skip the checks that normal API requests go through, which can lead to OS command execution. It affects RUTOS 7.22 through 7.24.2 and TSWOS 1.9 through 1.10, across RUT, RUTX, RUTM, RUTC, ATRM, TAP, CAP, OXA, DAP, TRB, OTD, EBG, SWM and TSW devices.

CVE-2026-75826 has a CVSS score of 8.5, High severity. It is a command injection flaw in the backup function that lets a remote authenticated attacker run arbitrary OS commands. It is fixed in RUTOS 7.24.6 and 7.25.2, and in TSWOS 1.10.4. Together, these flaws give an attacker a direct path to take over network edge devices that carry business traffic.

Teltonika RUT devices and the wider RUTOS and TSWOS families have two serious command execution flaws. The update closes both. CVE-2026-82104 has a CVSS score of 9.4, Critical severity. It lets an unauthenticated user call internal LUA functions directly and skip the checks that normal API requests go through, which can lead to OS command execution. It affects RUTOS 7.22 through 7.24.2 and TSWOS 1.9 through 1.10, across RUT, RUTX, RUTM, RUTC, ATRM, TAP, CAP, OXA, DAP, TRB, OTD, EBG, SWM and TSW devices.

CVE-2026-75826 has a CVSS score of 8.5, High severity. It is a command injection flaw in the backup function that lets a remote authenticated attacker run arbitrary OS commands. It is fixed in RUTOS 7.24.6 and 7.25.2, and in TSWOS 1.10.4. Together, these flaws give an attacker a direct path to take over network edge devices that carry business traffic.

This Veeam Backup and Replication update fixes an authorization bypass in the CDP Coordinator Service. An unauthenticated attacker can get past authorization controls on this service without any credentials. CVE-2026-108142 has a CVSS score of 9.1, Critical severity.

Backup infrastructure is a prime target because it holds copies of an organization's most sensitive data and is central to ransomware recovery. Apply this patch the same day to close unauthenticated access to the CDP Coordinator Service and protect backup integrity.

Veeam Backup for Microsoft 365 receives a security update that fixes two serious flaws in the platform organizations rely on to protect their Microsoft 365 data. CVE-2026-106076 has a CVSS score of 9.0, Critical severity. It is a SQL injection flaw that lets an authenticated organization-transfer peer inject SQL into the configuration database of the source server. The result is cross-tenant read and write access to configuration data and remote code execution as the PostgreSQL service account.

CVE-2026-106077 has a CVSS score of 8.3, High severity. It lets a user with the Veeam Backup for Microsoft 365 Administrator role read arbitrary files on the backup server with LocalSystem privileges. Together, these flaws put backup integrity, tenant isolation, and the backup server itself at risk.

Veeam Backup for Microsoft 365 receives a security update that fixes two serious flaws in the platform organizations rely on to protect their Microsoft 365 data. CVE-2026-106076 has a CVSS score of 9.0, Critical severity. It is a SQL injection flaw that lets an authenticated organization-transfer peer inject SQL into the configuration database of the source server. The result is cross-tenant read and write access to configuration data and remote code execution as the PostgreSQL service account.

CVE-2026-106077 has a CVSS score of 8.3, High severity. It lets a user with the Veeam Backup for Microsoft 365 Administrator role read arbitrary files on the backup server with LocalSystem privileges. Together, these flaws put backup integrity, tenant isolation, and the backup server itself at risk.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

WatchGuard Fireware OS receives a security update that fixes 13 vulnerabilities across the firewall's SIP proxy, Access Portal, FireCluster synchronization, authentication and logging services, certificate management, and management interface. Several flaws let unauthenticated remote attackers run arbitrary code or take privileged administrative actions on the device, while others let attackers who control or intercept traffic to the log server, Active Directory server, or WatchGuard Cloud execute code with root privileges. The rest allow authenticated or local attackers to gain root-level file write access, crash management and cluster services, or lock administrators out of the device.

The update covers seven Critical flaws: CVE-2026-103594 has a CVSS score of 9.5, Critical severity; CVE-2026-112709, CVE-2026-112710, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2, Critical severity; and CVE-2026-103593 has a CVSS score of 9.1, Critical severity. It also covers six High flaws: CVE-2026-111107 and CVE-2026-90465 each have a CVSS score of 8.7, High severity; CVE-2026-90442 has a CVSS score of 8.6, High severity; CVE-2026-90464 and CVE-2026-93862 each have a CVSS score of 7.2, High severity; and CVE-2026-93864 has a CVSS score of 7.1, High severity.

Wing FTP Server has a path traversal flaw because it does not verify each user's base folder. CVE-2026-105420 has a CVSS score of 9.4, Critical severity. An attacker with admin privileges can use scripts to add user directories that escape the base folder, then write files anywhere on the system. This can lead to remote code execution with the privileges of the server process.

The risk is higher on standard installs. The installation guide tells administrators to run the server with sudo, so files the attacker creates are owned by root. Version 8.2.6 fixes the flaw by enforcing the base folder boundary.

This WSO2 API Manager update closes two Critical access control flaws in the System REST APIs that let users without the right privileges run administrative actions. CVE-2025-11969 has a CVSS score of 9.4, Critical severity. Improper authorization lets users with lower-privilege roles perform restricted administrative operations, including running administrative functions. APIs exposed through the API Gateway are not affected.

CVE-2026-4052 has a CVSS score of 9.8, Critical severity. A missing authorization check lets a self-registered user reach the System REST APIs with a token from the WSO2 Identity Server token endpoint. This affects deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. Both flaws let attackers escalate privileges and take administrative control of the API management platform.

This WSO2 API Manager update closes two Critical access control flaws in the System REST APIs that let users without the right privileges run administrative actions. CVE-2025-11969 has a CVSS score of 9.4, Critical severity. Improper authorization lets users with lower-privilege roles perform restricted administrative operations, including running administrative functions. APIs exposed through the API Gateway are not affected.

CVE-2026-4052 has a CVSS score of 9.8, Critical severity. A missing authorization check lets a self-registered user reach the System REST APIs with a token from the WSO2 Identity Server token endpoint. This affects deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. Both flaws let attackers escalate privileges and take administrative control of the API management platform.

Zoho Log360 receives a security update that fixes two access control flaws affecting Log360 and EventLog Analyzer. CVE-2026-13594 has a CVSS score of 9.1, Critical severity, and lets an attacker gain unauthorized access to the product. CVE-2026-16900 has a CVSS score of 7.5, High severity, and lets an unauthenticated attacker bypass authentication to register a rogue local collector by sending a specially crafted registration request.

Both flaws allow privilege escalation inside a platform that collects and analyzes security event data. An attacker who exploits them can gain a foothold in the logging pipeline, tamper with what defenders see, and weaken incident detection across the environment. Apply the update the same day.

Zoho Log360 receives a security update that fixes two access control flaws affecting Log360 and EventLog Analyzer. CVE-2026-13594 has a CVSS score of 9.1, Critical severity, and lets an attacker gain unauthorized access to the product. CVE-2026-16900 has a CVSS score of 7.5, High severity, and lets an unauthenticated attacker bypass authentication to register a rogue local collector by sending a specially crafted registration request.

Both flaws allow privilege escalation inside a platform that collects and analyzes security event data. An attacker who exploits them can gain a foothold in the logging pipeline, tamper with what defenders see, and weaken incident detection across the environment. Apply the update the same day.

Camunda 7 versions 7.24.14 and 7.23.17 fix two serious flaws in the engine's REST API. CVE-2026-109432 has a CVSS score of 9.8, Critical severity. It is an expression injection flaw: the orQueries field of task queries skips the check that should block expressions in ad hoc queries. Any authenticated user can slip in a malicious expression and run operating-system commands as the engine service user. CVE-2026-109431 has a CVSS score of 8.1, High severity. It is a missing authorization check in the task comment and attachment endpoints. An authenticated user with no permissions who knows an object ID can read and download task comments and attachments, and can permanently delete attachments.

Proof-of-concept code is available for both vulnerabilities, so attackers have a clear path to use them. Any user account becomes a route to full server compromise and to stolen or destroyed business process data. Upgrade the 7.24 line to 7.24.14 and the 7.23 line to 7.23.17 now.

Camunda 7 versions 7.24.14 and 7.23.17 fix two serious flaws in the engine's REST API. CVE-2026-109432 has a CVSS score of 9.8, Critical severity. It is an expression injection flaw: the orQueries field of task queries skips the check that should block expressions in ad hoc queries. Any authenticated user can slip in a malicious expression and run operating-system commands as the engine service user. CVE-2026-109431 has a CVSS score of 8.1, High severity. It is a missing authorization check in the task comment and attachment endpoints. An authenticated user with no permissions who knows an object ID can read and download task comments and attachments, and can permanently delete attachments.

Proof-of-concept code is available for both vulnerabilities, so attackers have a clear path to use them. Any user account becomes a route to full server compromise and to stolen or destroyed business process data. Upgrade the 7.24 line to 7.24.14 and the 7.23 line to 7.23.17 now.

The FanRuan FineReport update fixes a critical path traversal flaw in FineReport 9.0. CVE-2021-48014 has a CVSS score of 9.8, Critical severity. The flaw sits in the design_save_svg operation of the ReportServer endpoint. An unauthenticated attacker can send one POST request with directory traversal sequences in the filePath parameter and write any file to the server, including a JSP webshell that runs the attacker's code.

Proof-of-concept code for CVE-2021-48014 is public, which lowers the skill needed to attack exposed servers. Report servers often hold sensitive business data and connect to backend databases, so one compromised server can expose much more of the network. Apply the update quickly, starting with any FineReport server that can be reached from the internet.

GnuPG for Windows has an update that fixes a critical flaw in how the software trusts its configuration directory. CVE-2026-118131 has a CVSS score of 9.8, Critical severity. GnuPG 2.5.21 on Windows inherits default permissions on the C:ProgramData directory, so any member of the local Users group can create subdirectories there. An attacker with low-privilege access can create GnuPG's expected configuration directory first and fill it with malicious configuration files.

When a victim runs GnuPG, its components load those planted files, and the attacker's code runs with the victim's privileges. A standard user can use this to take over the session of any other user on the same system, including administrators. Shared workstations, terminal servers, and multi-user systems that use GnuPG for signing or encryption face the highest risk.

HCL Domino Server is exposed to a man-in-the-middle flaw caused by the compromise of private keys for eight eMudhra intermediate CA certificates. These keys undermine certificate trust for the server's outbound network request features. An unauthenticated network attacker can spoof server certificates, then intercept and modify the content of outbound TLS connections. CVE-2026-108014 has a CVSS score of 9.1, Critical severity.

The update restores certificate trust for Domino's outbound TLS connections and closes this interception path. Apply it the same day to protect the integrity and confidentiality of data that Domino sends to external services.

HCL Notes Client has a critical certificate trust flaw. The private keys for eight eMudhra intermediate CA certificates were compromised, and this weakens the certificate trust behind the client's outbound network requests. An unauthenticated network attacker can spoof server certificates and launch a man-in-the-middle attack to intercept or modify outbound TLS traffic. This update covers CVE-2026-108015, which has a CVSS score of 9.1, Critical severity.

The risk is direct: email and collaboration traffic that users believe is secure can be read or altered in transit. Organizations running HCL Notes Client should deploy this update the same day to restore trusted connections and protect sensitive business communications.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

HPE ArubaOS (AOS) receives a security update that fixes 32 Critical vulnerabilities across AOS-8 and AOS-10. The flaws include authentication bypass, command injection, buffer overflow, memory corruption, SQL injection, path traversal, and sensitive information disclosure. Many sit in the management interfaces, the SSH daemon, the CLI, Wi-Fi frame processing, and the PAPI access point management protocol on UDP port 8211. An unauthenticated attacker, either remote or on an adjacent network, can run arbitrary code or commands as a privileged user or as root, take administrative control, change configurations, and fully compromise the controller.

CVE-2026-79844, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851 each have a CVSS score of 10.0, Critical severity. CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, and CVE-2026-79861 each have a CVSS score of 9.8, Critical severity. CVE-2026-79862, CVE-2026-79863, CVE-2026-79864, CVE-2026-79865, CVE-2026-79866, CVE-2026-79867, CVE-2026-79868, CVE-2026-79869, CVE-2026-79870, and CVE-2026-79871 each have a CVSS score of 9.6, Critical severity. CVE-2026-79872 has a CVSS score of 9.4, Critical severity. CVE-2026-79873, CVE-2026-79874, CVE-2026-79875, and CVE-2026-79876 each have a CVSS score of 9.3, Critical severity.

Two Critical vulnerabilities in Oracle Enterprise Manager for Oracle Database make this a same-day update. CVE-2026-101528 has a CVSS score of 9.9, Critical severity. CVE-2026-101529 has a CVSS score of 9.9, Critical severity. Both flaws are in the platform that manages Oracle Database environments, and this patch fixes both.

Two Critical vulnerabilities in Oracle Enterprise Manager for Oracle Database make this a same-day update. CVE-2026-101528 has a CVSS score of 9.9, Critical severity. CVE-2026-101529 has a CVSS score of 9.9, Critical severity. Both flaws are in the platform that manages Oracle Database environments, and this patch fixes both.

Two Critical vulnerabilities in Oracle Solaris put affected systems at serious risk, and this update closes both. CVE-2026-101537 has a CVSS score of 9.8, Critical severity, and CVE-2026-60432 also has a CVSS score of 9.8, Critical severity. With both flaws rated this high in one operating system, any unpatched Solaris system carries outsized exposure, making this a same-day update.

Two Critical vulnerabilities in Oracle Solaris put affected systems at serious risk, and this update closes both. CVE-2026-101537 has a CVSS score of 9.8, Critical severity, and CVE-2026-60432 also has a CVSS score of 9.8, Critical severity. With both flaws rated this high in one operating system, any unpatched Solaris system carries outsized exposure, making this a same-day update.

A security update for Oracle PeopleSoft Enterprise PeopleTools closes a Critical vulnerability in the technology layer that every PeopleSoft application runs on. CVE-2026-101420 has a CVSS score of 9.6, Critical severity, which places it among the most serious flaws an organization can carry. PeopleSoft HR, finance, and campus applications all depend on PeopleTools, so leaving this flaw open puts the core business systems built on top of it at risk.

Red Hat Build of Keycloak contains a Critical flaw in its SAML HTTP-Redirect binding that leaves federated user accounts open to full takeover. The server processes percent-encoded parameter names, such as %53AMLResponse, but its signature verification checks only literal names. That mismatch lets a crafted, unsigned SAML message slip past verification, and the server acts on it instead of the legitimately signed one. Keycloak decides who gets in, so a forged login gives the attacker every permission the targeted account holds.

Red Hat's update closes the gap between how the server reads SAML parameters and how it verifies their signatures. CVE-2026-117691 has a CVSS score of 9.1, Critical severity.

Six access-control flaws in Sonatype Nexus Repository 3 give administrator access, sign-in rights, signing secrets and upload rights to users who should not have them, and this update closes all six. CVE-2026-113373 has a CVSS score of 9.1, Critical severity, and lets disabled or locked users sign back in to Nexus Repository 3 Pro through a SAML or OAuth2/OpenID Connect identity provider and get their roles back. CVE-2026-97712 has a CVSS score of 8.7, High severity, and lets users who can create or update roles grant roles and privileges they do not hold, up to full administrative access. CVE-2026-113374 has a CVSS score of 8.6, High severity, and lets users who can only create capabilities turn on header-based authentication, so remote clients can sign in as an existing user, including an administrator, without credentials.

CVE-2026-113371 and CVE-2026-113372 each have a CVSS score of 7.1, High severity. Together they expose APT and YUM repository signing passphrases and YUM private signing keys to accounts that hold only read privilege for administering the repository, and anyone holding a leaked key can sign repository metadata as that repository. CVE-2026-97665 has a CVSS score of 7.1, High severity, and lets accounts with only read and browse privileges upload NuGet symbol packages without write permission to hosted repositories that have Symbol Server enabled. When anonymous access is on, this includes the built-in anonymous user.

Six access-control flaws in Sonatype Nexus Repository 3 give administrator access, sign-in rights, signing secrets and upload rights to users who should not have them, and this update closes all six. CVE-2026-113373 has a CVSS score of 9.1, Critical severity, and lets disabled or locked users sign back in to Nexus Repository 3 Pro through a SAML or OAuth2/OpenID Connect identity provider and get their roles back. CVE-2026-97712 has a CVSS score of 8.7, High severity, and lets users who can create or update roles grant roles and privileges they do not hold, up to full administrative access. CVE-2026-113374 has a CVSS score of 8.6, High severity, and lets users who can only create capabilities turn on header-based authentication, so remote clients can sign in as an existing user, including an administrator, without credentials.

CVE-2026-113371 and CVE-2026-113372 each have a CVSS score of 7.1, High severity. Together they expose APT and YUM repository signing passphrases and YUM private signing keys to accounts that hold only read privilege for administering the repository, and anyone holding a leaked key can sign repository metadata as that repository. CVE-2026-97665 has a CVSS score of 7.1, High severity, and lets accounts with only read and browse privileges upload NuGet symbol packages without write permission to hosted repositories that have Symbol Server enabled. When anonymous access is on, this includes the built-in anonymous user.

Six access-control flaws in Sonatype Nexus Repository 3 give administrator access, sign-in rights, signing secrets and upload rights to users who should not have them, and this update closes all six. CVE-2026-113373 has a CVSS score of 9.1, Critical severity, and lets disabled or locked users sign back in to Nexus Repository 3 Pro through a SAML or OAuth2/OpenID Connect identity provider and get their roles back. CVE-2026-97712 has a CVSS score of 8.7, High severity, and lets users who can create or update roles grant roles and privileges they do not hold, up to full administrative access. CVE-2026-113374 has a CVSS score of 8.6, High severity, and lets users who can only create capabilities turn on header-based authentication, so remote clients can sign in as an existing user, including an administrator, without credentials.

CVE-2026-113371 and CVE-2026-113372 each have a CVSS score of 7.1, High severity. Together they expose APT and YUM repository signing passphrases and YUM private signing keys to accounts that hold only read privilege for administering the repository, and anyone holding a leaked key can sign repository metadata as that repository. CVE-2026-97665 has a CVSS score of 7.1, High severity, and lets accounts with only read and browse privileges upload NuGet symbol packages without write permission to hosted repositories that have Symbol Server enabled. When anonymous access is on, this includes the built-in anonymous user.

Six access-control flaws in Sonatype Nexus Repository 3 give administrator access, sign-in rights, signing secrets and upload rights to users who should not have them, and this update closes all six. CVE-2026-113373 has a CVSS score of 9.1, Critical severity, and lets disabled or locked users sign back in to Nexus Repository 3 Pro through a SAML or OAuth2/OpenID Connect identity provider and get their roles back. CVE-2026-97712 has a CVSS score of 8.7, High severity, and lets users who can create or update roles grant roles and privileges they do not hold, up to full administrative access. CVE-2026-113374 has a CVSS score of 8.6, High severity, and lets users who can only create capabilities turn on header-based authentication, so remote clients can sign in as an existing user, including an administrator, without credentials.

CVE-2026-113371 and CVE-2026-113372 each have a CVSS score of 7.1, High severity. Together they expose APT and YUM repository signing passphrases and YUM private signing keys to accounts that hold only read privilege for administering the repository, and anyone holding a leaked key can sign repository metadata as that repository. CVE-2026-97665 has a CVSS score of 7.1, High severity, and lets accounts with only read and browse privileges upload NuGet symbol packages without write permission to hosted repositories that have Symbol Server enabled. When anonymous access is on, this includes the built-in anonymous user.

Six access-control flaws in Sonatype Nexus Repository 3 give administrator access, sign-in rights, signing secrets and upload rights to users who should not have them, and this update closes all six. CVE-2026-113373 has a CVSS score of 9.1, Critical severity, and lets disabled or locked users sign back in to Nexus Repository 3 Pro through a SAML or OAuth2/OpenID Connect identity provider and get their roles back. CVE-2026-97712 has a CVSS score of 8.7, High severity, and lets users who can create or update roles grant roles and privileges they do not hold, up to full administrative access. CVE-2026-113374 has a CVSS score of 8.6, High severity, and lets users who can only create capabilities turn on header-based authentication, so remote clients can sign in as an existing user, including an administrator, without credentials.

CVE-2026-113371 and CVE-2026-113372 each have a CVSS score of 7.1, High severity. Together they expose APT and YUM repository signing passphrases and YUM private signing keys to accounts that hold only read privilege for administering the repository, and anyone holding a leaked key can sign repository metadata as that repository. CVE-2026-97665 has a CVSS score of 7.1, High severity, and lets accounts with only read and browse privileges upload NuGet symbol packages without write permission to hosted repositories that have Symbol Server enabled. When anonymous access is on, this includes the built-in anonymous user.

Six access-control flaws in Sonatype Nexus Repository 3 give administrator access, sign-in rights, signing secrets and upload rights to users who should not have them, and this update closes all six. CVE-2026-113373 has a CVSS score of 9.1, Critical severity, and lets disabled or locked users sign back in to Nexus Repository 3 Pro through a SAML or OAuth2/OpenID Connect identity provider and get their roles back. CVE-2026-97712 has a CVSS score of 8.7, High severity, and lets users who can create or update roles grant roles and privileges they do not hold, up to full administrative access. CVE-2026-113374 has a CVSS score of 8.6, High severity, and lets users who can only create capabilities turn on header-based authentication, so remote clients can sign in as an existing user, including an administrator, without credentials.

CVE-2026-113371 and CVE-2026-113372 each have a CVSS score of 7.1, High severity. Together they expose APT and YUM repository signing passphrases and YUM private signing keys to accounts that hold only read privilege for administering the repository, and anyone holding a leaked key can sign repository metadata as that repository. CVE-2026-97665 has a CVSS score of 7.1, High severity, and lets accounts with only read and browse privileges upload NuGet symbol packages without write permission to hosted repositories that have Symbol Server enabled. When anonymous access is on, this includes the built-in anonymous user.

A critical flaw in SonicWall Global Management System (GMS) lets an unauthenticated attacker with network access read internal GMS files and expose sensitive information. This patch fixes CVE-2026-109593, which affects GMS 9.5.2 and earlier versions. CVE-2026-109593 has a CVSS score of 9.1, Critical severity. The attack needs no credentials, so every unpatched GMS instance reachable over the network is at risk.

Strapi Open Source and Enterprise Headless CMS has a Critical broken access control flaw in its review-workflows package. The package applies document updates without checking whether the caller has update rights, so users without that permission can still change managed content. A feature built to manage content review becomes a way to make unauthorized edits. This update closes that gap and covers one vulnerability. CVE-2026-118170 has a CVSS score of 9.1, Critical severity.

The Vertiv Avocent ACS8000 update closes a critical remote code execution flaw that gives remote attackers root-level control of the appliance. CVE-2026-65184 is an OS command injection vulnerability in the root-privileged wsserver terminal-bridge daemon. The daemon builds a shell command from client-supplied WebSocket fields and runs it without quoting, escaping, or character-set validation. The daemon's public-key session path also performs no appliance-session check. CVE-2026-65184 has a CVSS score of 9.8, Critical severity.

Apache Kafka has four Critical vulnerabilities, each with a CVSS score of 9.1: CVE-2026-110985, CVE-2026-111108, CVE-2026-111115, and CVE-2026-111496. CVE-2026-110985 is an authentication bypass: a broker using SASL/OAUTHBEARER with the default validator and no JWKS endpoint URL silently falls back to a validator that never checks the token signature, algorithm, or issuer, so an unauthenticated remote attacker who can reach the listener can forge a token for any principal, including superusers, and take full control of the cluster. CVE-2026-111108 and CVE-2026-111115 are memory-amplification flaws in the protocol readers: a request of a few tens of megabytes can declare enormous array lengths or tens of millions of tagged fields, forcing the broker to allocate many times the request size and crash with an out-of-memory error. Parsing runs before authorization, so open listeners need no credentials and authenticated ones need no specific permissions. CVE-2026-111496 affects Kafka Streams: a single record with a timestamp near the maximum value overflows the stream-time clock and locks the processing thread in an infinite loop that returns on every restart; it is reachable only through brokers older than 4.0.0 or those with a relaxed timestamp bound.

Apache Kafka 4.2.2, 4.3.2, and 4.4.0 resolve all four CVEs. A broker that would run without signature verification now refuses to start, the generated readers cap array pre-allocation and reject oversized array and tagged-field counts before allocating, and Streams computes punctuation times with overflow-checked arithmetic. Until the upgrade is deployed, set a JWKS endpoint URL on every listener that uses OAUTHBEARER validation, lower the maximum socket request size, and restrict network access to broker listeners.

Apache Kafka has four Critical vulnerabilities, each with a CVSS score of 9.1: CVE-2026-110985, CVE-2026-111108, CVE-2026-111115, and CVE-2026-111496. CVE-2026-110985 is an authentication bypass: a broker using SASL/OAUTHBEARER with the default validator and no JWKS endpoint URL silently falls back to a validator that never checks the token signature, algorithm, or issuer, so an unauthenticated remote attacker who can reach the listener can forge a token for any principal, including superusers, and take full control of the cluster. CVE-2026-111108 and CVE-2026-111115 are memory-amplification flaws in the protocol readers: a request of a few tens of megabytes can declare enormous array lengths or tens of millions of tagged fields, forcing the broker to allocate many times the request size and crash with an out-of-memory error. Parsing runs before authorization, so open listeners need no credentials and authenticated ones need no specific permissions. CVE-2026-111496 affects Kafka Streams: a single record with a timestamp near the maximum value overflows the stream-time clock and locks the processing thread in an infinite loop that returns on every restart; it is reachable only through brokers older than 4.0.0 or those with a relaxed timestamp bound.

Apache Kafka 4.2.2, 4.3.2, and 4.4.0 resolve all four CVEs. A broker that would run without signature verification now refuses to start, the generated readers cap array pre-allocation and reject oversized array and tagged-field counts before allocating, and Streams computes punctuation times with overflow-checked arithmetic. Until the upgrade is deployed, set a JWKS endpoint URL on every listener that uses OAUTHBEARER validation, lower the maximum socket request size, and restrict network access to broker listeners.

Apache Kafka has four Critical vulnerabilities, each with a CVSS score of 9.1: CVE-2026-110985, CVE-2026-111108, CVE-2026-111115, and CVE-2026-111496. CVE-2026-110985 is an authentication bypass: a broker using SASL/OAUTHBEARER with the default validator and no JWKS endpoint URL silently falls back to a validator that never checks the token signature, algorithm, or issuer, so an unauthenticated remote attacker who can reach the listener can forge a token for any principal, including superusers, and take full control of the cluster. CVE-2026-111108 and CVE-2026-111115 are memory-amplification flaws in the protocol readers: a request of a few tens of megabytes can declare enormous array lengths or tens of millions of tagged fields, forcing the broker to allocate many times the request size and crash with an out-of-memory error. Parsing runs before authorization, so open listeners need no credentials and authenticated ones need no specific permissions. CVE-2026-111496 affects Kafka Streams: a single record with a timestamp near the maximum value overflows the stream-time clock and locks the processing thread in an infinite loop that returns on every restart; it is reachable only through brokers older than 4.0.0 or those with a relaxed timestamp bound.

Apache Kafka 4.2.2, 4.3.2, and 4.4.0 resolve all four CVEs. A broker that would run without signature verification now refuses to start, the generated readers cap array pre-allocation and reject oversized array and tagged-field counts before allocating, and Streams computes punctuation times with overflow-checked arithmetic. Until the upgrade is deployed, set a JWKS endpoint URL on every listener that uses OAUTHBEARER validation, lower the maximum socket request size, and restrict network access to broker listeners.

Apache Kafka has four Critical vulnerabilities, each with a CVSS score of 9.1: CVE-2026-110985, CVE-2026-111108, CVE-2026-111115, and CVE-2026-111496. CVE-2026-110985 is an authentication bypass: a broker using SASL/OAUTHBEARER with the default validator and no JWKS endpoint URL silently falls back to a validator that never checks the token signature, algorithm, or issuer, so an unauthenticated remote attacker who can reach the listener can forge a token for any principal, including superusers, and take full control of the cluster. CVE-2026-111108 and CVE-2026-111115 are memory-amplification flaws in the protocol readers: a request of a few tens of megabytes can declare enormous array lengths or tens of millions of tagged fields, forcing the broker to allocate many times the request size and crash with an out-of-memory error. Parsing runs before authorization, so open listeners need no credentials and authenticated ones need no specific permissions. CVE-2026-111496 affects Kafka Streams: a single record with a timestamp near the maximum value overflows the stream-time clock and locks the processing thread in an infinite loop that returns on every restart; it is reachable only through brokers older than 4.0.0 or those with a relaxed timestamp bound.

Apache Kafka 4.2.2, 4.3.2, and 4.4.0 resolve all four CVEs. A broker that would run without signature verification now refuses to start, the generated readers cap array pre-allocation and reject oversized array and tagged-field counts before allocating, and Streams computes punctuation times with overflow-checked arithmetic. Until the upgrade is deployed, set a JWKS endpoint URL on every listener that uses OAUTHBEARER validation, lower the maximum socket request size, and restrict network access to broker listeners.

Delinea Secret Server (On-Prem) versions earlier than 12.3.1 carry three authentication-bypass flaws that hand attackers elevated access to the enterprise password vault. CVE-2026-115829 has a CVSS score of 9.9, Critical severity: a user can generate a two-factor PIN code for any account without prior authentication, skip the initial login step, and sign in with the second factor alone. CVE-2026-115828 has a CVSS score of 9.4, Critical severity: Secret Server does not always validate the PIN or biometric check when a FIDO2-compliant device is used. CVE-2026-115830 has a CVSS score of 8.7, High severity: under certain conditions a user can submit an unsigned JSON Web Token (JWT) and receive cloudadmin permissions in response. All three flaws enable privilege escalation.

Secret Server 12.3.1 fixes all three issues. Because the vault stores privileged credentials for the whole organization, a single bypassed login exposes every secret inside it and the systems those secrets unlock. Upgrade every on-prem Secret Server instance to 12.3.1 or later without delay.

Delinea Secret Server (On-Prem) versions earlier than 12.3.1 carry three authentication-bypass flaws that hand attackers elevated access to the enterprise password vault. CVE-2026-115829 has a CVSS score of 9.9, Critical severity: a user can generate a two-factor PIN code for any account without prior authentication, skip the initial login step, and sign in with the second factor alone. CVE-2026-115828 has a CVSS score of 9.4, Critical severity: Secret Server does not always validate the PIN or biometric check when a FIDO2-compliant device is used. CVE-2026-115830 has a CVSS score of 8.7, High severity: under certain conditions a user can submit an unsigned JSON Web Token (JWT) and receive cloudadmin permissions in response. All three flaws enable privilege escalation.

Secret Server 12.3.1 fixes all three issues. Because the vault stores privileged credentials for the whole organization, a single bypassed login exposes every secret inside it and the systems those secrets unlock. Upgrade every on-prem Secret Server instance to 12.3.1 or later without delay.

Delinea Secret Server (On-Prem) versions earlier than 12.3.1 carry three authentication-bypass flaws that hand attackers elevated access to the enterprise password vault. CVE-2026-115829 has a CVSS score of 9.9, Critical severity: a user can generate a two-factor PIN code for any account without prior authentication, skip the initial login step, and sign in with the second factor alone. CVE-2026-115828 has a CVSS score of 9.4, Critical severity: Secret Server does not always validate the PIN or biometric check when a FIDO2-compliant device is used. CVE-2026-115830 has a CVSS score of 8.7, High severity: under certain conditions a user can submit an unsigned JSON Web Token (JWT) and receive cloudadmin permissions in response. All three flaws enable privilege escalation.

Secret Server 12.3.1 fixes all three issues. Because the vault stores privileged credentials for the whole organization, a single bypassed login exposes every secret inside it and the systems those secrets unlock. Upgrade every on-prem Secret Server instance to 12.3.1 or later without delay.