After an intensive week of competition, learning and exchange, the European Cybersecurity Challenge (ECSC) 2026 has come to ...

CVE/CVSS: Not yet publicly disclosed; CVE identifiers and CVSS scores pending publication of individual Fortinet PSIRT advisories on the 10th of November 2026. Severity: Critical and high-severity ...

This vulnerability affects the on-prem VeloCloud Orchestrator (VCO) where any user with a valid VCO login, even the lowest built-in role (Enterprise Read Only), can gain operator privileges and act as ...

Type: Multiple (authentication bypass, command injection, SQL injection, buffer overflow, memory corruption, path traversal, file write/deletion, server-side request forgery, information disclosure, ...

NGINX is a widely used web server, reverse proxy and load balancer that handles web traffic for a large number of websites and online services. If exploited, these vulnerabilities could allow an ...

The private keys for eight eMudhra intermediate certificate authorities could be recovered from their public certificates, because the keys were generated with only a few bits of entropy instead of ...

An unauthenticated attacker can, under certain conditions, take control of a self-managed GitLab server by getting it to process a specially crafted regular expression. Attackers will target these ...

A critical vulnerability affecting Remote Support (RS) is remotely exploitable without authentication or user interaction.

The targeted management interfaces seem to have been exposed to the public Internet, which is contrary to security best practices. All organisations using the affected refrigeration equipments should ...

Affected software: Multiple Microsoft products. Type: Several types, ranging from Information Disclosure to Remote Code Execution and Privilege Escalation. CVE/CVSS: Microsoft patched 1407 ...

CVE-2026-102255: CWE-918: Server-Side Request Forgery (SSRF); CWE-441: Unintended Proxy or Intermediary ('Confused Deputy') CVE-2026-102256: CWE-78: Improper Neutralization of Special Elements used in ...

This vulnerability allows unauthenticated remote attackers to remotely execute arbitrary code on the device running Secure Email Gateway. This gives an attacker full control over the device, having a ...