Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current release of...
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
FreePBX 17.0.2 - Remote Code Execution (RCE)
Metabase 0.61.0 - Authenticated Remote Code Execution
Ghost_CMS 6.19.0 - Remote Code Execution
Langflow 1.10.0 - RCE
