Topic
Vulnerability
15 stories about Vulnerability that passed the news check, newest first.
Security · High impact ·
D-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link warned of multiple zero-day vulnerabilities in its DGS-3130 Series managed Gigabit stackable switches.
BleepingComputer
Security · High impact ·
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
Microsoft disclosed CVE-2026-83844, a remote code execution flaw in Windows Paint.
The Hacker News · 2 sources
Security · High impact ·
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an authentication bypass and a command injection, can be chained to run commands as root.
The Hacker News · 3 sources
Security · High impact ·
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
OpenSSH 10.6p2 was released with a workaround for a critical flaw, CVE-2026-123158 (nicknamed *sshole), that affects Linux systems using musl libc without PAM.
Biz & IT - Ars Technica · 17 sources
Security ·
CPython sandbox escape
Runsybil reported a sandbox escape vulnerability in CPython, according to an oss-security post by Alan Coopersmith dated 2026-11-05.
Open Source Security · 2 sources
Security ·
SourceHut disabled registration bypass | CVE-2026-121728
A registration bypass affecting SourceHut was disclosed and assigned CVE-2026-121728.
Lobsters
Security ·
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
Researchers disclosed a vulnerability in OpenAI's ChatGPT that could bypass Lockdown Mode protections.
The Hacker News
Security · High impact ·
Langflow's Critical Flaws Show Why Agent Tool Calls Need a Scrub Layer, Not Just a Patch
IBM disclosed critical vulnerabilities in Langflow, an open-source AI agent and workflow builder.
DEV Community: ai
Security · High impact ·
CVE-2026-109518: apt Flaw Lets Attackers Swap Packages After Verification and Run Code as Root
CVE-2026-109518 is a flaw in apt that lets attackers swap packages after they have been verified.
Step Security Blog
Security · High impact ·
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apple flaw, CVE-2024-27834, to its Known Exploited Vulnerabilities catalog.
Security Affairs
Security · High impact ·
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel's earlier patch for an actively exploited GS1900 switch flaw is incomplete; Binarly found patched switches still open to the exploit.
The Hacker News · 3 sources
Security · High impact ·
SonicWall warns of unpatched flaws in end-of-life GMS software
SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems.
BleepingComputer
Security · High impact ·
CISA flags WordPress RCE flaw as actively exploited in attacks
CISA warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress remote code execution flaw in the wild.
BleepingComputer
Security · High impact ·
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical flaw in Ruby on Rails lets an unauthenticated attacker write arbitrary files on an app's server by uploading a crafted file.
The Hacker News · 2 sources
Security ·
Wednesday, November 11, 2026 Security Releases
The Node.js project published a blog post titled "Wednesday, November 11, 2026 Security Releases" on 2026-11-04.
Node.js Blog