#уязвимость
-
Critical Pillow Flaw Turns a Filename Into Command Execution
Python's most popular image library could be made to run commands on a server simply by the name given to an EPS file it was asked to open. The fix landed in version 13.0.0.
-
Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day
Arista has shipped fixes for on-premises VeloCloud Orchestrator: a critical SQL injection flaw is already being exploited and lets authenticated users escalate to superuser privileges.
-
Hackers exploit SiteGuard WAF flaw to run commands as root and SYSTEM
A critical OS command injection flaw has been found in the statistics feature of the SiteGuard Server Edition firewall. Attacks are already underway.
-
Drupal patches two critical RCE flaws, warns exploits may come fast
Drupal has fixed two critical bugs that allow remote code execution on any supported version of the CMS and is urging administrators to update without delay.
-
Critical BlockStrap flaw threatens Magento servers
Researchers warn that the maximum-severity vulnerability CVE-2026-103849 in Magento and Adobe Commerce could let attackers run arbitrary PHP code on store servers.
-
A 37-Year-Old Bug Surfaces: Rooting OpenBSD via Code Older Than BSD Itself
Researchers at Calif gained root on OpenBSD with KARL, SMAP and SMEP enabled by overflowing a counter that had stayed 16-bit since the original BSD sources.
-
China-Linked Hackers Used BeyondTrust Zero-Day to Seize Remote Support Servers
The espionage group Armory Castle exploited a critical flaw in BeyondTrust Remote Support as a zero-day back in late August — a month and a half before a fix shipped.
-
Vghost: Linux kernel bug hands local users root and lets a guest break out to the host
A flaw in the vhost subsystem let a local user read and write kernel memory and become root for almost nine years, and in one virtualization setup let an untrusted VM break out to the host. The bug was found by Tencent's AI pipeline.
-
SAP Patches Maximum-Severity OAuth2 SSRF Flaw in Python Cloud SDK
SAP's October security release fixes 20 vulnerabilities, including a maximum-severity bug in its Python SDK that lets attackers steal application credentials.
-
Critical Bricksforge WordPress Flaw Under Active Exploitation
CVE-2026-85097, rated a maximum CVSS 10.0, lets unauthenticated attackers run arbitrary PHP on WordPress sites. Patchstack says exploitation began on October 7, 2026.
-
Unpatched LMCache Flaw Hands Remote Code Execution to Anyone on the Network
JFrog has disclosed a critical hole in LMCache, the open-source accelerator for LLM servers: a single network message can run code on the cache server — as root on the project's official images. No fix exists yet.
-
SonicWall patches max-severity SSRF flaw in SMA1000 gateways
The company has issued emergency hotfixes for its SMA1000 series: the flaw let an unauthenticated attacker make the appliance issue requests on their behalf and reach internal functionality.
-
Atlassian patches critical file-access flaw in Jira and Confluence
The CVE-2026-21589 vulnerability lets an unauthenticated attacker read specific files in a web application's root directory. It affects self-hosted Data Center products, including Confluence, Jira and Bitbucket.
-
Malicious Spreadsheets Run Code in LibreOffice and OpenOffice Without Macro Warnings
Researchers have shown that a specially crafted Calc document executes an attacker's code the moment it is opened — with none of the trust prompt both suites normally display before running a macro.
-
CISA flags critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. cybersecurity agency warns of a flaw in the RouterOS web interface that lets an unauthenticated attacker run code as root with a single request.
-
Cisco patches fifth SD-WAN Manager zero-day of the year amid active attacks
A critical authentication-bypass flaw, CVE-2026-76504, lets an unauthenticated attacker gain admin rights on Catalyst SD-WAN Manager. Cisco has confirmed active exploitation and shipped fixes.
-
OnePlus Leaves Flaws Unpatched as Ordinary Apps Reach Root Without Permissions
A researcher chained two bugs in OnePlus's own software to seize full control of a OnePlus 15. There is still no patch — and the company threatened him with legal action over publishing.
-
Cloudflare fixes cross-tenant data exposure in Containers
Accomplish researchers showed how a Workers Paid customer could read residual data from disks previously used by other tenants' containers on the same host.
-
Check Point confirms attacks on VPN Security Gateway RCE flaw
The company reports active exploitation of a pre-authentication flaw, CVE-2026-85102, in its VPN certificate handling, alongside a second bug used as a zero-day since July.
-
Critical WordPress RCE flaw: update without delay
A critical WordPress vulnerability can, under certain limited conditions, let an unauthenticated attacker run arbitrary code. Fixes have shipped for the current branch and been backported as far as version 4.7.
- More