GitLab Fixes 12-Year-Old CVSS 10 Flaw Enabling Unauthenticated RCE
GitLab has patched a maximum-severity vulnerability that could let an unauthenticated attacker execute code on self-managed servers. The affected code dates to GitLab 7.0, making immediate upgrades and...
PHP Prepares Emergency Fixes for Two Critical 9.2 Flaws
PHP is preparing security updates for two critical vulnerabilities rated 9.2 under CVSS 4.0. Administrators should inventory exposed PHP systems now and apply the official fixes as soon...
October Windows Server Updates Disrupt Exchange Mail Flow and Web Access
Microsoft says October 2026 Windows Server security updates can interrupt Exchange webmail, message delivery, and database availability. A registry-based mitigation is available, and administrators are advised to keep...
Microsoft Reissues Exchange Security Update to Close Cross-Mailbox Access Flaw
Microsoft has issued revised September 2026 Exchange Server updates for CVE-2026-96940, an 8.8-severity authorization flaw that could let an authenticated attacker access another user’s mailbox. Organizations that installed...
Apache HTTP Server 2.4.69 Fixes 20 Flaws Across CGI, WebDAV and Proxy Modules
Apache HTTP Server 2.4.69 addresses 20 vulnerabilities that can cause code execution, memory corruption, crashes, data exposure or authentication problems under particular configurations. Administrators should upgrade, but risk-based...
Apache Patches a Dozen Tomcat Flaws Spanning WebSockets, HTTP/2, and TLS Checks
Apache has released Tomcat 11.0.26 to close twelve security holes across WebSocket, HTTP/2, AJP, authentication, and certificate-validation code, including a message-smuggling bug and a header mix-up introduced by...
Chrome 153 Patches 42 Security Flaws, Including Three Critical Memory Bugs
Google’s Chrome 153 stable update closes 42 vulnerabilities, including three critical memory-safety issues in Internals, Workers and WebGL. Users and administrators should ensure the browser has restarted on...
Apple’s Largest Coordinated Update Closes 273 Unique Vulnerabilities
Apple has issued coordinated updates across its device ecosystem addressing 273 unique CVEs. The fixes cover remote code execution, kernel privilege escalation, authentication bypass, privacy failures and web-content...