CVE-2026-102795: Apache Traffic Server fixes affected version range
CVE-2026-102795 affects Apache Traffic Server in defined 9.x and 10.x versions. The entry replaces CVE-2026-41920 and mentions fixed releases.
Read ArticleIT Security Blog
Current security alerts, regulatory guidance and practical knowledge for well-founded cyber risk decisions.
Featured Post
Latest Posts
CVE-2026-93029: Stored XSS in the cPanel-WHM interface
CVE-2026-93029 affects a stored XSS vulnerability in the WHM interface Manage SSL Hosts with a CVSS score of 9.0.
Read Article CVE-2026-93698 and CVE-2026-93697: Security Updates for cPanel and WP Squared
Two critical vulnerabilities in cPanel and WP Squared: Updates available since September 29, 2023. Check patch status and accessible management interfaces now.
Read Article CVE-2026-75957: Authentication Bypass in Ultimate Multisite
CVE-2026-75957 affects Ultimate Multisite up to and including version 2.15.0. A patch is available starting from version 2.15.1.
Read Article CVE-2026-93903: Update LiteSpeed Web Server prior to 6.3.7 build 1
CVE-2026-93903 affects LiteSpeed Web Server prior to 6.3.7 build 1. The manufacturer provides a fix for the bypassing of account isolation.
Read Article CVE-2026-102334: Brute-Force Risk in Nginx Proxy Manager
CVE-2026-102334 affects Nginx Proxy Manager up to 2.16.0. Missing rate limits allow unlimited login and TOTP attempts.
Read Article CVE-2026-61560: Three Critical Vulnerabilities in GitLab-MCP
Three critical vulnerabilities in @zereight/mcp-gitlab affect unprotected MCP endpoints, token leakage, and DNS rebinding.
Read Article CVE-2026-8778: Unauthenticated file upload in WooCommerce plugin
CVE-2026-8778 affects MIPL Grouped Checkout Fields for WooCommerce up to and including 1.2.1.
Read Article CVE-2026-78509: Microsoft Office Vulnerability with CVSS 9.8
CVE-2026-78509 affects multiple Microsoft Office products and has a CVSS score of 9.8.
Read Article CVE-2026-69356 and CVE-2026-69641: Security Updates for Microsoft Exchange Server
Microsoft is releasing security updates for CVE-2026-69356 and CVE-2026-69641 in Exchange Server.
Read Article CVE-2026-82067: MongoDB Server can start with authorization disabled
CVE-2026-82067 can cause MongoDB Server authorization to remain disabled upon startup.
Read Article CVE-2026-73312: Three OAuth2 vulnerabilities in XenForo
Three OAuth2 vulnerabilities affect XenForo before 2.3.13. XenForo 2.3.13 includes security fixes for CVE-2026-73309, CVE-2026-73311, and CVE-2026-73312.
Read Article CVE-2026-67276: Bypassing SSH Authentication in MikroTik RouterOS
CVE-2026-67276 affects SSH key verification in MikroTik RouterOS. Security updates are available.
Read Article
English 
Deutsch 
Français