CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from ...
-
The Hacker News
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, ...
-
The Hacker News
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code- ...
-
The Hacker News
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attack ...
-
cert.pl
Vulnerability in Sparx Systems Enterprise Architect software
Vulnerability in Sparx Systems Enterprise Architect software CVE ID CVE-2026-88794 Publication date 15 October 2026 Vendor Sparx Systems Product Enterprise Architect Vulnerable versions 17.1 Vulnerabi ...
-
security.nl
Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic
Er is een nieuwe versie van Curl verschenen die meer dan twintig kwetsbaarheden verhelpt, waaronder een beveiligingslek dat remote code execution (RCE) mogelijk maakt en werd gevonden door AI-bedrijf ...
-
cert.pl
Vulnerabilities in Slican telephone exchanges
Vulnerabilities in Slican telephone exchanges CVE ID CVE-2026-35088 Publication date 15 October 2026 Vendor Slican Product IPx, CCT-1668, MAC-6400, CXS-0424 Vulnerable versions All before 6.62.0100 (I ...
-
security.nl
Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls
Aanvallers maken actief misbruik van een remote code execution (RCE) kwetsbaarheid in de firewalls van Palo Alto Networks, waardoor de apparaten volledig zijn over te nemen, zo laat het cybersecurityb ...
-
security.nl
Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway
Aanvallers maken door middel van malafide bijlages actief misbruik van een kritieke kwetsbaarheid in de Cisco Secure Email Gateway, zo laat Cisco weten. Er zijn beveiligingsupdates uitgebracht om het ...
-
The Hacker News
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI ...