Apache Tomcat Patches Encryption Bypass Vulnerability
Apache Tomcat released versions 11.0.21, 10.1.54, and 9.0.117 to fix CVE-2026-34486, a missing encryption vulnerability.
Tag: patch
Langflow Fixes Critical RCE Vulnerability
Langflow released version 1.10.1 to address CVE-2026-9198, a critical code injection vulnerability allowing unauthenticated RCE.
Critical Gitea RCE Vulnerability CVE-2026-60004 Allows Repository Writers to Execute Shell Commands via Git Hooks
A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-60004 with a CVSS score of 9.8, has been patched in Gitea, the…
Critical TeamCity Flaw CVE-2026-63077 Allows Unauthenticated RCE
JetBrains has disclosed a critical vulnerability in on-premise versions of TeamCity, tracked as CVE-2026-63077 with a CVSS score of 9.8. The flaw…
Zimbra Patches Critical SNMP Command Injection and Multiple XSS Flaws
Zimbra has released security updates addressing nine vulnerabilities in Zimbra 10.1.20, including a critical command injection flaw in the Simple Network Management…
Zimbra 10.1.20: Latest Security Update
Zimbra 10.1.20 is the latest version that patches nine security vulnerabilities including critical SNMP command injection and multiple XSS flaws.
n8n Token Exchange Flaw CVE-2026-59208 Enables Account Takeover via JWT Sub Claim Mismatch
A critical vulnerability in n8n's Enterprise token exchange feature, tracked as CVE-2026-59208, allows attackers to log in as any user by exploiting…
Kiro: AWS AI tool
AWS Kiro was patched for a similar vulnerability (CVE-2026-10591) allowing auto-execution of malicious files.
SonicWall: Vendor of SMA 1000 Appliances Affected by Critical Flaws
SonicWall is a cybersecurity company that produces the SMA 1000 series VPN appliances. It released patches for CVE-2026-15409 and CVE-2026-15410 in mid-July…
JoomliC
Developer of the iCagenda extension for Joomla that released patches for CVE-2026-48939 in versions 4.0.8 and 3.9.15.