LiteSpeed cPanel Plugin Flaw Lets Any Shared Hosting User Take Over the Entire Server
A critical privilege escalation bug in LiteSpeed’s user-end cPanel plugin — now confirmed as actively exploited…
Category
Vulnerability
NGINX Hit by Second Unauthenticated RCE —’nginx-poolslip’
F5 has rushed out a security advisory for a second critical heap overflow vulnerability in NGINX’s…
Trend Micro’s Own Security Tool Turned Against Enterprises — Apex One Zero-Day Actively Exploited
The endpoint security software meant to protect enterprise networks from attackers has itself become a target.…
Windows Kernel Bug Breaks Every Browser Sandbox — And It Almost Stayed Secret Until Pwn2Own
A security researcher prepared a devastating Windows kernel exploit for Pwn2Own Berlin 2026 — then had…
PostgreSQL Patches 11 Security Flaws, Including Code Execution and a Sneaky Password-Stealing Timing Attack
The world’s most popular open-source database just dropped its biggest security update of the year —…
Composer Bug Silently Dumped GitHub Tokens Into CI Logs — Patch Now
Millions of PHP developers who rely on Composer for dependency management were silently exposed to a…
Exim Mail Server Has a Critical Unauthenticated RCE — And an AI Helped Build the Exploit
A critical security vulnerability in Exim — the mail server software running on roughly half of…
Palo Alto PAN-OS Zero-Day Under Active Attack — No Patch Available Yet
Attackers are already exploiting a critical zero-day vulnerability in Palo Alto Networks’ PAN-OS, the operating system…
CVE-2026-41940: cPanel Authentication Bypass Was Already Being Exploited Before the Patch Even Dropped
On April 28, 2026, cPanel pushed an emergency security update for what it described as a…