Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
17 matching stories — incident, in Workload Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
A single 32-bit multiplication is enough to turn a malicious PDF into memory corruption. We break down the integer overflow vulnerability behind CVE-2026-81983 and show exactly where Acrobat’s safety check fails. The post CVE-2026-81983: Integer Overflow Vulnerability Enables Out-of-Bounds Write in Adobe Acrobat appeared first on Remedio.
A critical out-of-bounds write in the VMXNET3 virtual network adapter lets an attacker with local administrative privileges inside a guest VM execute code on the ESXi host. ZeroLock’s VMX Lockdown rule is designed to constrain that path.   What CVE-2026-47876 does VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A […] The post CVE-2026-47876: Host Code Execution from a Guest VM, and the Control That Constrains It appeared first on
Summary: Microsoft patched an Exchange Server privilege-escalation flaw on August Patch Tuesday. On August 27, a public PoC dropped, tied to a Pwn2Own-grade exploit chain capable of full, unauthenticated server takeover. If you run Exchange on-prem, patch now. Timeline August Patch Tuesday — Microsoft ships a fix for CVE-2026-62911 as part of its regular Exchange [...] The post CVE-2026-62911: Exchange Server PoC Is Public — Patch Now appeared first on Messageware.
CVE-2026-59310 Root Cause Analysis A critical VMware vCenter vulnerability, CVE-2026-59310, was actively exploited in the wild within days of its disclosure. It’s giving attackers a permanent back door into sensitive, virtualized infrastructure. Some vulnerabilities never see the light of day in actual exploitation, but that is not the case here. As of August 14th 2026, about 361 systems have already been […] The post Inside CVE-2026-59310: Root Cause Analysis of the VMware vCenter R
The recent vulnerability identified as CVE-2026-15328 affects IBM WebSphere Application Server and WebSphere Application Server Liberty. This flaw allows for inconsistent interpretation of HTTP requests, posing a significant threat to server security. The vulnerability is pres...
Recently, the CVE-2026-15325 vulnerability has come to light, impacting IBM WebSphere Application Server. This vulnerability poses significant risks, particularly for system administrators and hosting providers managing Linux servers. Understanding these vulnerabilities, and r...
In today's rapidly evolving digital landscape, cybersecurity vulnerabilities are an ongoing threat for server administrators and hosting providers. The recent alert concerning CVE-2026-15280, affecting IBM WebSphere Application Server, underscores the necessity for robust serv...
CVE-2026-45504 is a low-privileged, authenticated Exchange mailbox user can trick on-prem Exchange into reading arbitrary local files (config files, credential material) via a WOPI/WAC URL-parsing flaw. Microsoft patched it June 9, 2026. A public PoC dropped June 24, 2026. If you haven't patched, do it now, exploitability just went from "less likely" to "trivial." Summary [...] The post CVE-2026-45504: Public PoC Exploit Released appeared first on Messageware.