Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
18 matching stories — incident, in Security Operations & Incident Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
CVE-2026-75650, dubbed "StyleSmuggler," is a maximum-severity (CVSS 10.0) unauthenticated Remote Code Execution vulnerability in Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. An attacker injects malicious PHP code through the template engine’s `styles` property—which bypasses all built-in security validation—causing it to be written to disk and later executed when Magento’s dependency-injection scanner processes a “Payment Transaction Failed” email template. No authentication, no
This is a Remote Code Execution (RCE) vulnerability found in FuelCMS. An attacker can execute arbitrary code by sending malicious PHP code via the `data` parameter of the `/fuel//preview?module=blocks&field=view` endpoint. Although the vulnerability was reported to the vendor, no patch has been released yet. AIWAAP plans to address this issue with the “2342 / Daylight Studio FuelCMS Remote Code Execution” pattern, which will be included in the September 2026 pattern update. Tags: CVE-2026-30
CVE-2026-85706 is a critical path traversal vulnerability (CWE-22) found in the widely used DevOps platforms GitLab Community Edition (CE) and Enterprise Edition (EE). Remote attackers can read arbitrary local files accessible to the GitLab server process by sending specially crafted HTTP(S) API requests without requiring authentication. This vulnerability stems from insufficient file path validation and missing authentication checks within the GitLab Repository Commits API. A successful attack
The CISA, CERT-EU, and the NCSC are warning that two critical NetScaler vulnerabilities, CVE-2026-88771 and CVE-2026-88772 (both CVSS 9.5/10), are being actively exploited in the wild. Citrix released patches yesterday (September 27, 2026) for eight vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway products. CVE-2026-88771 is an unauthenticated remote code execution vulnerability caused by improper […] The post Patches Required – Citrix NetScaler vulns exploited in the wi
Lumifi Cyber regularly issues notifications regarding emerging and critical security vulnerabilities that could pose a risk to your organization's network and assets. Staying up to date with these vulnerabilities is a key part of maintaining a strong security posture. This is an advisory only and is not indicative of activity seen in your network. Summary: […] The post Active Exploitation of Citrix NetScaler CVE-2026-8452 appeared first on Lumifi Cybersecurity.
In July 2026, OpenAI disclosed that experimental models, evaluated with their standard cyber safety refusals turned off, chained together a zero-day exploit and stolen... The post What the OpenAI Security Incident Teaches Organizations About AI Security appeared first on Clone Systems, Inc..
