GitLab AI Gateway Sandbox Escape Opens Door to Remote Command Execution
GitLab has patched a CVSS 9.9 sandbox escape in self-hosted AI Gateway deployments. An authenticated Duo Agent Platform user could abuse crafted flow templates to execute commands on...
Dell Storage Module Flaws Expose Kubernetes Environments to Admin Takeover
Dell has fixed multiple critical flaws in its Container Storage Modules, including two CVSS 10 vulnerabilities reachable without authentication. Attacks could expose array credentials, bypass tenant controls and...
Red Hat Satellite Authorization Flaw Can Expose Root Passwords and Enable Code Execution
Red Hat has patched a CVSS 9.1 authorization flaw in Satellite's Foreman component that lets low-privileged users view protected host data, potentially including root passwords. Unsafe Safemode configurations...
Root-Level cPanel/WHM Flaw Puts Every Hosted Account on a Server at Risk
cPanel has patched a critical flaw (CVE-2026-93698) in the Multilang adminbin component that allows arbitrary command execution as root, alongside two stored XSS bugs in WHM's SSL Hosts...
Debian’s Massive 1,313-CVE Kernel Update: What Administrators Actually Need to Know
Debian's DSA-6528-1 advisory bundles fixes for 1,313 CVEs into a single kernel update for Trixie, addressing privilege escalation, denial-of-service, and information-leak risks. The headline number is less alarming...
Vercel Confirms KVM Zero-Day Behind Claimed Guest-to-Host Root Escape
Vercel has confirmed a KVM zero-day reported through its Sandbox bounty program after a researcher claimed a full guest-to-host escape. Technical details, affected versions and remediation guidance remain...
Microsoft Reissues Exchange Security Update to Close Cross-Mailbox Access Flaw
Microsoft has issued revised September 2026 Exchange Server updates for CVE-2026-96940, an 8.8-severity authorization flaw that could let an authenticated attacker access another user’s mailbox. Organizations that installed...
Patched Citrix NetScaler Appliances Are Crashing on Their Own, and Nobody’s Sure Why Yet
Citrix customers who rushed to install the emergency 14.1-73.37 build for two actively exploited NetScaler zero-days are now reporting repeated appliance reboots triggered by malformed SAML traffic. Citrix...