Security flaw in Broadcom chip allows strangers to control nearby routers
A flaw in Broadcom's Wi-Fi setup software allows attackers within radio range to execute code as root on routers without a network password or pairi…
Open Source
⚑ Report a ProblemLatest Open Source news from Tech News
All topics
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Threat Prevention Signatures and CVE-2026-0322: What limited Coverage Requires
Threat Prevention Signatures and CVE-2026-0322: What limited Coverage Requires Palo Alto Networks provides Threat Prevention coverage for CVE-2026-0…
Feature policy bypass through URL-based expressions on NetScaler (CVE-2026-88774)
Feature policy bypass through URL-based expressions on NetScaler (CVE-2026-88774) Five of the eight CVEs in the September 2026 NetScaler advisory ar…
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons
Original research by the Hacktron AI team (Harsh Jaiswal, Mohan Pedhapati, Rahul Maini) — read the full writeup here: https://www.hacktron.ai/blog/h…
Management Interface Exposure: The Real Risk Behind CVE-2026-0322
Management Interface Exposure: The Real Risk Behind CVE-2026-0322 The CVSS-B score for CVE-2026-0322 is 8.6, and the suggested urgency is the highes…
Webform and Webform REST Flaws in the September 2026 Drupal Advisory
Webform and Webform REST Flaws in the September 2026 Drupal Advisory Two related projects, two advisories Advisory WID-SEC-2026-3554 covers contribu…
A Patch Runbook for CVE-2026-62911 in Microsoft Exchange Server
A Patch Runbook for CVE-2026-62911 in Microsoft Exchange Server CVE-2026-62911 is a privilege elevation vulnerability in Microsoft Exchange Server,…
Citrix NetScaler CVE-2026-19490 and CVE-2026-19489: Audit Evidence for a Perimeter Patch
Citrix NetScaler CVE-2026-19490 and CVE-2026-19489: Audit Evidence for a Perimeter Patch Remediation is a technical act; proving it is a governance…
AI Agents with Dynamic Tool Access May Bypass Runtime Context Prioritization in Vulnerability Management
Introduction Runtime context prioritization has historically served as a foundational strategy in vulnerability management, enabling organizations t…
HTTP request smuggling on NetScaler ADC and Gateway (CVE-2026-88773)
HTTP request smuggling on NetScaler ADC and Gateway (CVE-2026-88773) Not every serious appliance bug is a memory corruption. In the September 2026 N…
Patching PRTG: What Build 26.2.120.1449 Changes for CVE-2026-4637 and CVE-2026-4638
Patching PRTG: What Build 26.2.120.1449 Changes for CVE-2026-4637 and CVE-2026-4638 Paessler's fixed build for PRTG Network Monitor is 26.2.120.1449…
CVE-2026-21589 needs no login: what unauthenticated access means for exposed Atlassian instances
CVE-2026-21589 needs no login: what unauthenticated access means for exposed Atlassian instances NCSC-NL advisory NCSC-2026-0402 records CVE-2026-21…
Как строить сканирование активов в MaxPatrol VM. Ч.3 — Linux-активы
Добрый день, дорогие читатели! В прошлой статье мы разбирали, как настраивать сканирование Windows-активов. Сегодня же мы разберемся с Linux-активам…
ServiceNow CVE-2026-18885, CVE-2026-18886 and CVE-2026-74820: a CVSS 10.0 platform flaw under active exploitation
ServiceNow CVE-2026-18885, CVE-2026-18886 and CVE-2026-74820: a CVSS 10.0 platform flaw under active exploitation In late August and early September…
Exposure Context for CVE-2026-96358: What 436,276 Drupal Fingerprints Mean
Exposure Context for CVE-2026-96358: What 436,276 Drupal Fingerprints Mean Vulnerability overview CVE-2026-96358 appears in CERT-BUND advisory WID-S…
Kiteworks patches max-severity EPG flaw in Wednesday advisory
Kiteworks has patched CVE-2026-54154, a maximum-severity flaw in its Email Protection Gateway (EPG) that lets an unauthenticated remote attacker cha…
Configuration decides exposure: mapping the NetScaler CVEs to the way appliances are deployed (CVE-2026-88776)
Configuration decides exposure: mapping the NetScaler CVEs to the way appliances are deployed (CVE-2026-88776) One useful habit when triaging an app…
73,811 reachable PRTG instances: what exposure data does and does not prove
73,811 reachable PRTG instances: what exposure data does and does not prove Vulnerability overview Two PRTG issues were fixed in version 26.2.120.14…
Two Denial-of-Service Vectors in One Apache Round: NiFi and MyFaces Compared
Two Denial-of-Service Vectors in One Apache Round: NiFi and MyFaces Compared Same outcome, different layers The October 2026 Apache round contains t…
Command Injection in Legacy CPE: A Technical Walkthrough of CVE-2026-95675
Command Injection in Legacy CPE: A Technical Walkthrough of CVE-2026-95675 Overview CVE-2026-95675 is a textbook command injection in consumer-grade…
ZooKeeper Information Disclosure: Existence Watches Leak Restricted Znode Names
ZooKeeper Information Disclosure: Existence Watches Leak Restricted Znode Names Summary Among the four Apache ZooKeeper flaws fixed in September 202…
CVE-2026-95675: Unauthenticated Root Command Injection in D-Link DAP-1360 Firmware
CVE-2026-95675: Unauthenticated Root Command Injection in D-Link DAP-1360 Firmware Vulnerability overview CVE-2026-95675 is a critical OS command in…
ShowDoc 3.9.2 and the username field that ends up as PHP
ShowDoc 3.9.2 and the username field that ends up as PHP Chinese security firm QiAnXin published QVD-2026-61708 on 4 September 2026. The advisory co…
CVE-2026-103877 risk assessment: scoring the LDAP API deserialization flaw against your real attack surface
CVE-2026-103877 risk assessment: scoring the LDAP API deserialization flaw against your real attack surface Vulnerability overview CVE-2026-103877 i…
Detection and verification for CVE-2026-102795 in Apache Traffic Server
Detection and verification for CVE-2026-102795 in Apache Traffic Server Overview CVE-2026-102795 is an improper access control flaw in Apache Traffi…
When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion
When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion Vulnerability overview The Zammad compromise at DIVD is memorable for two…
Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102
Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102 Vulnerability overview CERT-In Vulnerability Not…
Choosing Between rsync and btrfs receive in LXD: Exposure Differences Under CVE-2026-87799
Choosing Between rsync and btrfs receive in LXD: Exposure Differences Under CVE-2026-87799 Storage design is security design Two LXD operators can r…
CVE-2026-63292: A Configuration-Dependent Stack Overflow in Apache httpd 2.4
CVE-2026-63292: A Configuration-Dependent Stack Overflow in Apache httpd 2.4 What Apache disclosed The Apache Software Foundation published CVE-2026…
Why Patching CVE-2026-96369 Often Fails in Composer and Container Deployments
Why Patching CVE-2026-96369 Often Fails in Composer and Container Deployments Vulnerability overview CVE-2026-96369 appears in CERT-BUND advisory WI…