Vulnerability News

Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls

Hackers are exploiting a high-severity flaw in Palo Alto Networks PAN-OS that allows authenticated attackers to run code with root…

4 days ago

Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks

Cisco has warned that attackers are actively exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway that can give…

4 days ago

Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code

F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers…

5 days ago

24 Security Vulnerabilities Patched in curl Used Across 30 Billion Installations

The curl project released curl 8.23.0 on October 14, 2026, announcing 24 security fixes affecting the widely used data transfer…

5 days ago

Google Awarded $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6

Security researchers earned a $250,000 reward from Google after building a full-chain Chrome exploit with AI agents. The XBOW team…

5 days ago

Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks

Microsoft has released fixes for a Windows SmartScreen vulnerability that allows an attacker with local access to gain higher privileges.…

5 days ago

Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks

Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the Web protections.…

5 days ago

Microsoft Fixes 1,118 Vulnerabilities in October Patch Tuesday and Introduces New Risk Cohorts

Microsoft’s October 2026 Patch Tuesday briefing outlines 1,118 vulnerabilities across 15 risk groups, alongside a new approach designed to help…

6 days ago

Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication

Fortinet disclosed a critical authentication-bypass vulnerability in the FortiSandbox graphical user interface that could let remote attackers access protected functions…

6 days ago

Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images

Docker has disclosed a critical Docker Hub vulnerability that could let attackers impersonate other users and publish container images under…

6 days ago