Technology ❯ Cybersecurity ❯ Vulnerability Management

Security Patching

PHP Security Updates AsyncOS and Content Scanner Tools remediation CVE-2026-85706 Fixed GitLab Releases Drupal Commerce Core 3.3.13 and 8.x-2.41 Updates Microsoft Patch Tuesday Vulnerability Remediation Atlassian Data Center Remediation Releases Emergency PHP Server Updates Atlassian Fixed Versions and Upgrade Guidance Expedited PHP Security Updates Chrome update 155.0.8059.79/.80

Ivanti Releases Patches for Two Remaining Connect Secure Zero-Days

CISA has set federal deadlines requiring urgent patches, forensic triage, rotation of exposed credentials.

Drupal Commerce Core Authorization Bypass Is Actively Exploited

TeamViewer Patch Fixes Flaw That Let Controlled Computers Attack Support PCs

Attackers Scanning for Recently Patched Oracle E‑Business Suite Flaw

Apple Pushes Large Security Wave and Backports Exploited CoreGraphics Fix to Older iPhones

Critical Brotli Flaw Prompts Emergency Patches for Node.js, .NET and Major Libraries

Node.js Patches 'Node2Shell' Brotli Bug After RCE Demonstration

Arista Patches Critical VeloCloud SQL Injection Zero‑Day

GitLab Patches Maximum‑Severity RCE Flaw Affecting Releases Back to 2014

Plex2Shell Exploit Turns Unpatched Plex Servers Into Miners and Proxy Nodes

Critical SiteGuard WAF Flaw Lets Attackers Run Commands as Root

Critical Command‑Injection Flaw Lets Attackers Backdoor Nextcloud via Collabora Built‑In CODE App

Microsoft Issues Record Four‑Digit Patch Tuesday, Fixing Exploited Windows Shell Zero‑Day

Cisco Patches Actively Exploited Zero‑Day in Secure Email Gateway

GitLab Patches Maximum-Severity RCE in CI/CD Regular Expression Compiler

SonicWall SMA1000 SSRF Flaw Exploited Days After Patch

Citrix Issues Patch for Critical NetScaler SAML RCE

Critical Atlassian Data Center Flaw Draws Rapid Scanning and Exploitation

Microsoft Issues Emergency Fix for High‑Severity Exchange Mailbox Flaw

Public PoC Triggers Active Exploitation Of Critical Rejetto HFS Flaw