Security

1 Articles

Next.js Patches Two Critical Unauthenticated RCE Flaws

Next.js 16.4.1 and 15.5.28 fix two critical RCE flaws, including CVE-2026-96889 in SVG image optimization, plus a Server Actions DoS.

Security —— Oct 16, 2026 3 min read

CVE-2026-106931 in SiteGuard WAF Server Edition is exploited, letting attackers run OS commands as root. Fixed…

Security —— Oct 15, 2026 4 min read

CVE-2026-99999 (PwnEscape) is a critical Linux kernel flaw that lets a VM guest leak host memory…

Skype —— Oct 15, 2026 3 min read

Microsoft has patched a remote code execution flaw in Skype for Business Server that lets an…

TOR —— Oct 15, 2026 4 min read

The Tor Project is urging Linux relay operators to audit their servers after attackers broke into…

Security —— Oct 15, 2026 6 min read

AdFection: Citizen Lab says Discover-Tech used targeted ads to deliver Candiru zero-click spyware to Al Jazeera…

Security —— Oct 14, 2026 4 min read

curl 8.23.0 fixes CVE-2026-92392, a high-severity HTTP/2 upload use-after-free that a malicious server can turn into…

OpenAI —— Oct 14, 2026 5 min read

OpenAI engineer Abdulrahman Alfozan is charged with planting an encrypted audio recorder behind a TV in…

Security —— Oct 14, 2026 3 min read

Meta says hackers used a stolen employee login to take source code and personal data of…

Cybersecurity —— Oct 13, 2026 5 min read

An unprotected database tied to India’s Vibetech exposed 13.7 million breached credentials, including plaintext passwords and…