Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
101 matching stories — incident, in Vulnerability Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes and remote code execution, along with indicators of compromise for defenders.
OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments.The intrusion achieved root code execution, deployed multiple persistence mechanisms, installed PHP web shells, created outbound command-and-control and internal tunnelling capabilities, performed targeted reconnaissance of DNS, LDAP/Active Direc
OverviewOn October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support (RS), its platform for remotely troubleshooting and administering endpoints. Tracked as CVE-2026-102764 and assigned a CVSSv4 score of 9.3, the vulnerability allows unauthenticated remote attackers to perform file operations on an affected appliance without user interaction. Versions 26.2.3 and earlier are affected unless the BT26-05-RS patch has been applied.BeyondTrust has confirmed that explo
CVE-2026-102764 (CVSS 9,3, EPSS ≥ 67. Perzentil) ist eine kritische Schwachstelle zur Umgehung der Authentifizierung in BeyondTrust Remote Support (RS). Die Schwachstelle beruht auf einer unzureichenden Origin Validation in einer internen Messaging-Komponente, und ihre Ausnutzung ermöglicht es nicht authentifizierten Angreifenden, aus der Ferne Dateioperationen auf einer betroffenen Appliance auszuführen. Die CVE wurde am 15. Oktober […]
OverviewOn October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an unauthenticated user.The advisory states that CVE-2026-97229 affects GitLab CE and EE from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. GitLab says all deployment types are affected unles
CVE-2026-104935 is an actively exploited Ivanti Connect Secure authentication bypass that can enable remote code execution. Review the exploit chain, affected versions, fixed releases, indicators of compromise, and how NodeZero Rapid Response helps validate exposure and verify remediation.
Attackers are chaining CVE-2026-105133 and CVE-2026-105134 to bypass authentication and achieve remote code execution in AhsayCBS. Explore the technical findings, indicators of compromise, affected versions, hotfixes, and how NodeZero Rapid Response helps validate exposure.
Executive Summary A maximum-severity vulnerability (CVE-2026-97229, CVSS 10.0) was disclosed affecting GitLab Community Edition (CE) and Enterprise Edition (EE), allowing attackers to execute arbitrary code on GitLab servers via specially crafted regular expressions in CI/CD pipeline configurations. Due to the potential for full server compromise and downstream supply-chain impact, immediate patching is required. About CVE-2026-97229 […] The post Critical GitLab RCE Lets Unauthenticated At
Ivanti has disclosed CVE-2026-104935, a high-severity vulnerability in Ivanti Connect Secure (ICS) that is being actively exploited in real-world attacks. The flaw carries a CVSS score of 8.6 and enables unauthenticated attackers to bypass authentication and execute arbitrary commands on vulnerable VPN appliances. The vulnerability came to light after Volexity investigated a compromised Ivanti Connect […] The post CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited for Unauthenticate
GitLab has released emergency patches for CVE-2026-97229, a critical remote code execution vulnerability with a maximum CVSS score of 10.0. The implications extend well beyond a compromised server. The post Critical GitLab Vulnerability (CVE-2026-97229) Puts Software Supply Chains at Risk first appeared on Action1.
CVE-2026-21589 (CVSS 9,3, EPSS ≥ 78. Perzentil) ist eine Schwachstelle mit kritischem Schweregrad für beliebigen Dateizugriff [CWE-552], die Atlassian Jira Service Management Data Center, Jira Software Data Center, Confluence Data Center, Bitbucket Data Center, Bamboo Data Center, Crowd Data Center, Crucible und Fisheye betrifft. Alle ungepatchten Versionen der betroffenen Produkte sind anfällig. Die Dateizugriffsschwachstelle lässt […]
OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands.Ivanti reports that exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers. This indicates that exploitation has been occurring as a zero-da
SAP revises CVE-2025-42938 in Note 3629325 version 13. Updated applicability, correction instructions and the S4CEXT manual step require reassessment. The post SAP Note 3629325: October XSS Revision (CVE-2025-42938) appeared first on RedRays - Your SAP Security Solution.
CVE-2026-89117 is reflected XSS in SAP Enterprise Portal. The fix is in EP-ADMIN 7.50, with different patch levels from October's EP-RUNTIME fixes. The post SAP Note 3779985: Enterprise Portal Reflected XSS (CVE-2026-89117) appeared first on RedRays - Your SAP Security Solution.
CVE-2026-89118 exposes restricted SAP Enterprise Portal information anonymously. EP-RUNTIME fixes and verification without an authenticated session. The post SAP Note 3789825: Enterprise Portal Information Disclosure (CVE-2026-89118) appeared first on RedRays - Your SAP Security Solution.
CVE-2026-104286 (CVSS 9,8, EPSS ≥ 82. Perzentil) ist eine kritische Path-Traversal-Schwachstelle [CWE-22] in Verbindung mit einer fehlerhaften Verarbeitung von NULL-Bytes [CWE-158] und betrifft Fortinet FortiMail. Eine Ausnutzung ist über HTTP/HTTPS-Anfragen an die Weboberfläche von FortiMail möglich. Die Schwachstelle wurde am 1. Oktober 2026 sowohl veröffentlicht als auch in die KEV-Liste der CISA aufgenommen. Eine erfolgreiche […]
Yesterday we wrote up CVE-2026-87902, the unauthenticated local file inclusion in WordPress page template resolution fixed in 7.1.2. That post covered the sink, the preconditions and the fix. This is the follow-up on what we are seeing hit our firewall. Update, 23 September 2026: when this post first went up, every request we had seen […]
Threat Summary CVE-2026-76461 is a pre-authentication SQL injection vulnerability in the email parsing logic of Cisco Secure Email Gateway (AsyncOS). This vulnerability enables unauthenticated remote threat actors to execute arbitrary code as root by sending crafted, malicious emails. This grants threat actors full control over the operating system, allowing data exfiltration, email surveillance, persistent access, ... CVE-2026-76461: Active Exploitation of Cisco Secure Email Gateway Critical Ze
Threat Summary CVE-2026-76461 is a pre-authentication SQL injection vulnerability in the email parsing logic of Cisco Secure Email Gateway (AsyncOS). This vulnerability enables unauthenticated remote threat actors to execute arbitrary code as root by sending crafted, malicious emails. This grants threat actors full control over the operating system, allowing data exfiltration, email surveillance, persistent access, ... CVE-2026-76461: Active Exploitation of Cisco Secure Email Gateway Critical Ze
Threat Summary Patches have now been released addressing two critical vulnerabilities: CVE-2026-85102, which affects Security Gateway and Spark Firewall, and CVE-2026-85103, which affects Security Gateway, Management Server, and Spark Firewall. CVE-2026-85102 is an improper certificate validation during VPN negotiation and CVE-2026-85103 heap overflow in ASN.1 certificate decoding. Both bugs open the door to unauthenticated remote ... Check Point VPN Critical RCE Vulnerabilities CVE-2026-85102 &
Sysdig TRT details a hand-rolled attack against marimo's CVE-2026-39987 without AI, building custom Python tools to breach a cloud bastion host.
Wiz Research has identified active, in-the-wild exploitation of three critical and high-severity vulnerabilities impacting JFrog Artifactory (CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329). Attackers are chaining these vulnerabilities to bypass authentication and gain administrative control.
Summary SAP issued an urgent security update this week to address the critical vulnerability CVE-2026-44756, commonly known as OVERPASS. The vulnerability has the highest possible severity rating, with a CVSS score of 10.0, and affects a wide range of SAP solutions. OVERPASS could enable threat actors to disrupt SAP services, access sensitive information, change system […] The post SAP OVERPASS Vulnerability: Protecting SAP Systems from CVE-2026-44756 appeared first on Layer Seven Security
What is CVE-2026-56164? CVE-2026-56164, also known as the Microsoft SharePoint Server Elevation of Privilege Vulnerability, is a critical zero-day privilege... The post Microsoft SharePoint Server: CVE-2026-56164 appeared first on NopSec.
CVE-2026-31431, dubbed Copy Fail, is a logic flaw in the Linux kernel's authencesn cryptographic template that lets any unprivileged local user gain root access with a 732-byte Python script. It affects every major Linux distribution shipped since 2017 and requires no race conditions, no version-specific payloads, and no special kernel features. Patch now or disable the vulnerable module immediately.
A pre-auth RCE in cPanel & WHM (CVE-2026-41940) gives attackers root on over a million internet-facing hosts. What it is, why it matters, and what to do.