CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code- ...
-
The Hacker News
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attack ...
-
cert.pl
Vulnerability in Sparx Systems Enterprise Architect software
Vulnerability in Sparx Systems Enterprise Architect software CVE ID CVE-2026-88794 Publication date 15 October 2026 Vendor Sparx Systems Product Enterprise Architect Vulnerable versions 17.1 Vulnerabi ...
-
security.nl
Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic
Er is een nieuwe versie van Curl verschenen die meer dan twintig kwetsbaarheden verhelpt, waaronder een beveiligingslek dat remote code execution (RCE) mogelijk maakt en werd gevonden door AI-bedrijf ...
-
cert.pl
Vulnerabilities in Slican telephone exchanges
Vulnerabilities in Slican telephone exchanges CVE ID CVE-2026-35088 Publication date 15 October 2026 Vendor Slican Product IPx, CCT-1668, MAC-6400, CXS-0424 Vulnerable versions All before 6.62.0100 (I ...
-
security.nl
Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls
Aanvallers maken actief misbruik van een remote code execution (RCE) kwetsbaarheid in de firewalls van Palo Alto Networks, waardoor de apparaten volledig zijn over te nemen, zo laat het cybersecurityb ...
-
security.nl
Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway
Aanvallers maken door middel van malafide bijlages actief misbruik van een kritieke kwetsbaarheid in de Cisco Secure Email Gateway, zo laat Cisco weten. Er zijn beveiligingsupdates uitgebracht om het ...
-
The Hacker News
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI ...
-
Dark Reading
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
6 Min ReadSource: cagkansayin via Getty ImagesHundreds of French grocers likely lost many millions of dollars this week from cyberattacks that manipulated their refrigeration systems.Overnight on Mond ...
-
The Hacker News
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vuln ...