Vulnerabilities

PHP CVE-2026-109618 · CVE-2026-109619 Checked 9 Nov 2026

3–9 November

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not…

Open

Google Brotli Checked 9 Nov 2026

7–9 November

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms…

Open

Ivanti Connect Secure CVE-2026-118527 · CVE-2026-104935 Checked 9 Nov 2026

3–9 November

Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to…

Open

Citrix NetScaler Checked 9 Nov 2026

7–9 November

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37,…

Open

WordPress Checked 9 Nov 2026

3–9 November

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging…

Open

Apple Multiple Products Checked 9 Nov 2026

7–9 November

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS…

Open

Linux kernel CVE-2026-46300 · CVE-2026-98432 Checked 9 Nov 2026

3–9 November

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing…

Open

Log4j Checked 9 Nov 2026

5–9 November

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…

Open

OpenSSH (musl/Alpine) Checked 9 Nov 2026

7–9 November

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass…

Open

Veeam Backup and Replication Checked 9 Nov 2026

4–9 November

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

Open