Tag

CVE

5 stories

Seven Critical Firebox Flaws in WatchGuard Fireware Could Allow Remote Code Execution

WatchGuard disclosed a set of serious vulnerabilities in Fireware OS on October 27, 2026, revealing seven critical defects that, in some cases, allow remote code execution or root-level actions without prior authentication. The advisory is part of a broader release covering 18 security issues across Fireware OS and the Windows Mobile VPN with SSL client, with the seven critical entries carrying CVSS scores between 9.1 and 9.5. Where noted, attackers…

Saugata DattaOct 29, 20263 min read212

Cloud Computing

Chrome 156 Patch Closes 52 Flaws, Including Four Critical Bugs

Google has pushed a new Chrome update that patches 52 security vulnerabilities across the browser, addressing issues that touch file handling, page rendering, JavaScript, graphics, and media processing. The Stable channel moves to version 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. According to Google’s release, the fixes include four critical vulnerabilities, 46 high-severity issues, and two medium-severity bugs. The company has not published exploit details or confirmed active…

Saugata DattaOct 28, 20263 min read216

Cybersecurity

Splunk Patches 24 Flaws — Four Critical Vulnerabilities in Enterprise and SOAR Addressed

Splunk has released a set of security updates correcting 24 vulnerabilities across Splunk Enterprise and Splunk SOAR. The fixes, published in advisories on October 21, 2026, include four critical flaws with CVSS scores as high as 9.9 and a mix of issues that range from improper access control and unsafe input handling to the potential for remote code execution and denial-of-service. Because Splunk often occupies a central role in security…

Saugata DattaOct 23, 20263 min read284

Cybersecurity

Debian Patches 1,313 Kernel Flaws: What Administrators Need to Know

Debian has just released a major kernel security update that aggregates fixes for 1,313 CVE entries, a headline figure that has drawn attention across the Linux community. The update — published as DSA-6528-1 and delivered for the Trixie stable release as Linux source package 6.12.111-1 — addresses a range of vulnerabilities that could, in different contexts, lead to privilege escalation, denial of service, or information leaks. While the scale of…

Saugata DattaOct 3, 20264 min read366

Cybersecurity

CrackArmor: Nine AppArmor Flaws Let Local Users Escalate to Root — What Organizations Need to Know

AppArmor, a widely deployed Linux Mandatory Access Control (MAC) framework, is at the center of a set of serious vulnerabilities that researchers have dubbed “CrackArmor.” Disclosed on March 12, 2026 by the Qualys Threat Research Unit (TRU), the collection of flaws affects AppArmor’s implementation as a Linux Security Module (LSM) and has been present in the upstream kernel since around version 4.11 (2017). Because AppArmor ships enabled by default on…

Saugata DattaMar 13, 20264 min read918

Seven Critical Firebox Flaws in WatchGuard Fireware Could Allow Remote Code Execution

Chrome 156 Patch Closes 52 Flaws, Including Four Critical Bugs

Splunk Patches 24 Flaws — Four Critical Vulnerabilities in Enterprise and SOAR Addressed

Debian Patches 1,313 Kernel Flaws: What Administrators Need to Know

CrackArmor: Nine AppArmor Flaws Let Local Users Escalate to Root — What Organizations Need to Know

Free Tools: IP, DNS, SSL