Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
651 matching stories — incident — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
NGINX Rift: Dissecting an 18-Year-Old Critical RCE Vulnerability (CVE-2026-42945)
Critical NGINX heap buffer overflow (CVE-2026-42945, CVSS 9.2) enables unauthenticated RCE. Technical breakdown, exploit chain analysis, and mitigation steps.
Rapid Reaction: Palo Alto PAN-OS Buffer Overflow Vulnerability (CVE-2026-0300)
A Palo Alto PAN-OS buffer overflow vulnerability (CVE-2026-0300) has been disclosed, affecting the User-ID Authentication Portal (also known as the Captive Portal) on PA-Series and VM-Series firewalls. The flaw allows an unauthenticated remote attacker to execute arbitrary code with root privileges via specially crafted packets sent to the User-ID Authentication Portal service. No patches are currently available, and…
Rapid Reaction: Palo Alto PAN-OS Buffer Overflow Vulnerability (CVE-2026-0300)
A Palo Alto PAN-OS buffer overflow vulnerability (CVE-2026-0300) has been disclosed, affecting the User-ID Authentication Portal (also known as the Captive Portal) on PA-Series and VM-Series firewalls. The flaw allows an unauthenticated remote attacker to execute arbitrary code with root privileges via specially crafted packets sent to the User-ID Authentication Portal service. No patches are currently available, and […]
Zero-Day Alert: Unauthenticated RCE in Palo Alto PAN-OS Under Active Exploitation (CVE-2026-0300)
Critical PAN-OS zero-day CVE-2026-0300 enables unauthenticated RCE with root privileges. No patch yet—apply workarounds immediately.
Security incident prioritization: proven methods to improve alert triage
The post Security incident prioritization: proven methods to improve alert triage appeared first on StrangeBee.
Linux Privilege Escalation (CVE-2026-31431): Copy Fail Exploit and Detection
Overview Not every privilege escalation comes from a broken piece of code. In some cases, combining normal kernel features in the wrong way is enough to get root. “Copy Fail” is one of those cases.
Copy Fail (CVE-2026-31431): 732 Bytes to Root on Every Linux Distribution
CVE-2026-31431, dubbed Copy Fail, is a logic flaw in the Linux kernel's authencesn cryptographic template that lets any unprivileged local user gain root access with a 732-byte Python script. It affects every major Linux distribution shipped since 2017 and requires no race conditions, no version-specific payloads, and no special kernel features. Patch now or disable the vulnerable module immediately.
cPanel: auth bypass into RCE on a 1,000,000+ internet-facing hosts (CVE-2026-41940)
A pre-auth RCE in cPanel & WHM (CVE-2026-41940) gives attackers root on over a million internet-facing hosts. What it is, why it matters, and what to do.
Rapid Reaction – cPanel Authentication Bypass Vulnerability (CVE-2026-41940)
A cPanel authentication bypass vulnerability (CVE-2026-41940) has been disclosed, affecting cPanel & WHM installations across multiple versions. The flaw allows attackers to bypass authentication mechanisms and gain unauthorized access to control panel interfaces — putting hosted websites, databases, and server configurations at risk. watchTowr Labs, our dedicated vulnerability research and exploit development team, has assessed […]