Current CVEs, vendor advisories, and specific recommendations for addressing critical security vulnerabilities.
Seven critical vulnerabilities in IBM DataPower Gateway, including code execution and LDAP login with an empty password. Fixes: 10.5.0.23, 10.6.0.11, 11.0.0.3.
Read Article CVE-2026-32557 affects WooCommerce Appointments up to and including 5.3.2. The vulnerability is accessible over the network without authentication.
Read Article CVE-2026-32568 affects WooCommerce Designer Pro up to and including version 1.9.33 and is rated CVSS 9.9.
Read Article CVE-2026-102795 affects Apache Traffic Server in defined 9.x and 10.x versions. The entry replaces CVE-2026-41920 and mentions fixed releases.
Read Article CVE-2026-93029 affects a stored XSS vulnerability in the WHM interface Manage SSL Hosts with a CVSS score of 9.0.
Read Article Two critical vulnerabilities in cPanel and WP Squared: Updates available since September 29, 2023. Check patch status and accessible management interfaces now.
Read Article CVE-2026-75957 affects Ultimate Multisite up to and including version 2.15.0. A patch is available starting from version 2.15.1.
Read Article CVE-2026-93903 affects LiteSpeed Web Server prior to 6.3.7 build 1. The manufacturer provides a fix for the bypassing of account isolation.
Read Article CVE-2026-102334 affects Nginx Proxy Manager up to 2.16.0. Missing rate limits allow unlimited login and TOTP attempts.
Read Article Three critical vulnerabilities in @zereight/mcp-gitlab affect unprotected MCP endpoints, token leakage, and DNS rebinding.
Read Article CVE-2026-8778 affects MIPL Grouped Checkout Fields for WooCommerce up to and including 1.2.1.
Read Article CVE-2026-78509 affects multiple Microsoft Office products and has a CVSS score of 9.8.
Read Article Microsoft is releasing security updates for CVE-2026-69356 and CVE-2026-69641 in Exchange Server.
Read Article
English 
Deutsch 
Français