News Security Cisco warns of actively exploited Catalyst SD-WAN Manager authentication bypass October 3, 2026 by Alex Mira | Leave a Comment Cisco says CVE-2026-76504 is an actively exploited authentication bypass in Catalyst SD-WAN Manager. Administrators should apply the relevant fixed release and review specified logs for suspicious activity. Read more » Cisco cve Network Security SD-WAN Vulnerability Management
News Security TeamViewer patches five vulnerabilities in client and host software October 1, 2026 by Alex Mira | Leave a Comment TeamViewer has released version 15.82 to fix five vulnerabilities affecting its Full Client and Host software on Windows, Linux, and macOS, including a flaw that can bypass configured remote-session permissions. Read more » cve Linux Security Remote Access Security TeamViewer Vulnerability Management Windows security
News Security ShieldBreak (CVE-2026-69414): What’s confirmed about the new Microsoft Defender elevation-of-privilege flaw August 18, 2026 by Alex Mira | Leave a Comment ShieldBreak (CVE-2026-69414) is a Microsoft Defender elevation-of-privilege flaw with a patch in progress. Here’s what’s confirmed, what’s still unclear, and what to watch for. Read more » cve Microsoft Defender Patch management Privilege escalation Windows security Zero-day
News Security TP-Link Omada ZTP cryptographic weaknesses: CVE-2025-15544, CVE-2025-15627, CVE-2025-15631 August 8, 2026 by Alex Mira | Leave a Comment Three TP-Link Omada ZTP flaws—CVE-2025-15544, CVE-2025-15627, and CVE-2025-15631—expose weaknesses in adoption-time trust and credential protection. Here’s what to do now. Read more » cve Firmware updates IoT security Network Security Omada TP-Link Zero-touch provisioning
News Security CISA flags active RCE exploitation in Joomla extensions; separate SQLi fix lands for Quix Page Builder July 20, 2026 / July 20, 2026 by Alex Mira | Leave a Comment CISA added two actively exploited Joomla extension flaws to its KEV catalog, warning of RCE via file uploads in iCagenda and Balbooa Forms. Separately, Quix Page Builder patched an unauthenticated SQL injection in version 6.2.1. Read more » CISA CMS security cve Joomla Joomla extensions Patch management Remote code execution
News Security Linux kernel privilege-escalation bugs touch cloud and industrial systems: what’s confirmed June 27, 2026 / June 27, 2026 by Alex Mira | Leave a Comment Multiple Linux kernel privilege-escalation bugs now documented by Google Cloud and CISA affect cloud workloads and at least one industrial product line. Here’s what’s confirmed and what to do next based on the advisories. Read more » CISA Cloud security cve Google Cloud ICS security Linux kernel Privilege escalation
News Security CVE-2026-10557: Hard‑coded MQTT credentials expose Yarbo robot telemetry and commands June 22, 2026 / June 22, 2026 by Alex Mira | Leave a Comment CVE-2026-10557 details hard‑coded, shared MQTT credentials in Yarbo’s mobile apps that expose fleet‑wide robot telemetry and enable command publishing using only a serial number. CISA rates it Critical (CVSS 9.8). Here’s what’s confirmed, why it matters, and prudent steps until vendor guidance arrives. Read more » cve ICS IoT security Mobile apps MQTT privacy vulnerability
News Ubiquiti UniFi OS critical fixes: CVE-2026-33000 and related flaws May 22, 2026 / May 22, 2026 by Alex Mira | Leave a Comment Ubiquiti’s Security Advisory Bulletin 064 addresses multiple critical UniFi OS vulnerabilities, including CVE-2026-33000. Check your device model and update to the fixed versions listed by the vendor. Read more » cve Network Security Patching Ubiquiti UniFi OS Vulnerabilities
News ScadaBR 1.2.0 flagged by CISA for four serious flaws (CVE-2026-8602 through CVE-2026-8605) May 21, 2026 / May 21, 2026 by Alex Mira | Leave a Comment CISA warns that ScadaBR 1.2.0 contains four vulnerabilities (CVE-2026-8602 to CVE-2026-8605) that could enable unauthenticated RCE, data injection, CSRF abuse, and admin access via hard-coded credentials. Read more » CISA advisory cve Industrial control systems Remote code execution SCADA security ScadaBR
News Claude Code CVE-2026-39861: symlink-assisted sandbox escape fixed May 13, 2026 / May 13, 2026 by Alex Mira | Leave a Comment A GitHub advisory for CVE-2026-39861 details a symlink-based sandbox escape in Claude Code, now fixed. A separate CVE in jotty.page (CVE-2026-42564) addresses an unauthenticated path traversal fixed in 1.22.0. Read more » Claude Code cve Path Traversal Sandbox Security advisory Symlink
