Type: Multiple (authentication bypass, command injection, SQL injection, buffer overflow, memory corruption, path traversal, file write/deletion, server-side request forgery, information disclosure, ...

CVE/CVSS: Not yet publicly disclosed; CVE identifiers and CVSS scores pending publication of individual Fortinet PSIRT advisories on the 10th of November 2026. Severity: Critical and high-severity ...

An unauthenticated attacker can, under certain conditions, take control of a self-managed GitLab server by getting it to process a specially crafted regular expression. Attackers will target these ...

A critical vulnerability affecting Remote Support (RS) is remotely exploitable without authentication or user interaction. Successful exploitation could allow an attacker to bypass internal validation ...

This vulnerability allows unauthenticated remote attackers to remotely execute arbitrary code on the device running Secure Email Gateway. This gives an attacker full control over the device, having a ...

Affected software: Multiple Microsoft products. Type: Several types, ranging from Information Disclosure to Remote Code Execution and Privilege Escalation. CVE/CVSS: Microsoft patched 1407 ...

The vulnerability is exploited in the wild, according to Ivanti and CISA. Given the possibility of exploitation without authentication or user interaction, organisations operating affected appliances ...

The targeted management interfaces seem to have been exposed to the public Internet, which is contrary to security best practices. All organisations using the affected refrigeration equipments should ...

Affected software: HPE Networking AOS-Switch (AOS-S) 16.11.0031 and below (Aruba 2530, 2540, 2615, 2620, 2915, 2920, 2930F, 2930M, 3800, 3810M, 5400 zl and 5400R zl2 Switch Series). HPE Networking AOS ...

CVE-2026-102255: CWE-918: Server-Side Request Forgery (SSRF); CWE-441: Unintended Proxy or Intermediary ('Confused Deputy') CVE-2026-102256: CWE-78: Improper Neutralization of Special Elements used in ...

Artificial intelligence (AI) has made possible cyberattacks that, until recently, could not have been imagined. AI models and agents do what hackers already do, namely detect and exploit ...

Citrix has confirmed that CVE-2026-88771 and CVE-2026-88772 are being actively exploited in the wild against unmitigated NetScaler ADC and NetScaler Gateway deployments. CISA has subsequently added ...