CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
TheCyberThrone
Drupal Fixes Critical Remote Code Execution Vulnerability
October 16, 2026Drupal has disclosed a critical remote code execution (RCE) vulnerability in its core Field UI module, tracked as CVE-2026-108097. The security advisory, SA-CORE-2026-014, was publish ...
-
The Hacker News
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud ...
-
The Hacker News
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories.The rest gets intere ...
-
The Hacker News
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from ...
-
The Hacker News
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, ...
-
The Hacker News
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code- ...
-
The Hacker News
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attack ...
-
cert.pl
Vulnerability in Sparx Systems Enterprise Architect software
Vulnerability in Sparx Systems Enterprise Architect software CVE ID CVE-2026-88794 Publication date 15 October 2026 Vendor Sparx Systems Product Enterprise Architect Vulnerable versions 17.1 Vulnerabi ...
-
security.nl
Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic
Er is een nieuwe versie van Curl verschenen die meer dan twintig kwetsbaarheden verhelpt, waaronder een beveiligingslek dat remote code execution (RCE) mogelijk maakt en werd gevonden door AI-bedrijf ...
-
cert.pl
Vulnerabilities in Slican telephone exchanges
Vulnerabilities in Slican telephone exchanges CVE ID CVE-2026-35088 Publication date 15 October 2026 Vendor Slican Product IPx, CCT-1668, MAC-6400, CXS-0424 Vulnerable versions All before 6.62.0100 (I ...