Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE gstreamer-plugins-bad Important Buffer Overflow Issues 2026-3125-1

An update that solves seven vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories

Ubuntu libXfont Important Denial Of Service Heap Overflow Vuln 8560-1

Several security issues were fixed in libXfont.

Linux

LinuxSecurity - Security Advisories

Ubuntu 26.04 LTS rlottie Critical Denial of Service USN-8559-1

rlottie could be made to crash if it received specially crafted input.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Containerized Data Importer Moderate Threat Advisory 2026-11305-1

An update that solves 13 vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed kubevirt-container-disk Moderate CVE-2026-35469

An update that solves one vulnerability can now be installed.

Linux Docker

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed php-composer2 Moderate CVE-2026-45793 Security Fix

An update that solves one vulnerability can now be installed.

Linux PHP

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed wget Moderate Access Control Risk CVE-2026-15146

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories

Fedora 44 python-uv-build Update Security Hardening FEDORA-2026-be84487fdd

Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.

Linux

LinuxSecurity - Security Advisories

Fedora 44 rust-astral_async_zip Key Update on ZIP Handling 2026-be84487fdd

Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.

Linux

LinuxSecurity - Security Advisories

Fedora 43 uv Update 0.11.28 Security Zip Handling Fix 2026-8893ec1aeb

Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.

Linux

LinuxSecurity - Security Advisories

Fedora 43 rust-astral_async_zip Important Zip Handling Fix 2026-8893ec1aeb

Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Chromedriver Moderate Update 2026-11309-1

An update that solves 7 vulnerabilities can now be installed.

Linux Chrome

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE libsuricata8 Moderate Update Advisory 2026-11308-1

An update that solves 5 vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Chromium Important Use After Free Vulnerabilities Vuln 2026-0254-1

An update that fixes 7 vulnerabilities is now available.

Linux Chrome

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 python-asyncssh Critical Unauthorized Access Fix 2026-574496d9ae

import asyncssh 2.23.1 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via pat…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 python-asyncssh Important Unauthorized File Write CVE-2026-54590

update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via p…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 mbedtls 3.6.7 Critical Update DoS Buffer Overflow Fixes

Update to 3.6.7 Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-…

Linux

LinuxSecurity - Security Advisories

openSUSE python-django-haystack Important Remote Code Exec Vuln 2026-0252-1

An update that contains security fixes can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Debian tiff Critical Denial of Service or Code Exec Advisory DSA-6392-1

A flaw was discovered in tiff, a Tag Image File Format library, which may result in denial of service or the execution of arbitrary code if malformed image fil…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Debian Roundcube Critical Account Takeover Denial of Service Fix DSA-6391-1

Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Python-Weasyprint Moderate CSS Injection CVE-2026-49452

An update that fixes one vulnerability is now available.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed kbfs Security Advisory 2026-11306-1 CVE 2026-39824

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Nginx New Moderate Update Advisory Released 2026-11295-1

An update that solves 3 vulnerabilities can now be installed.

Linux Nginx

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Blender Moderate Security Issue Advisory 2026-11288-1

An update that solves 3 vulnerabilities can now be installed.

Linux

Back to Home

What it means for your servers

Check Point gateways hacked through PHP2Shell: the vendor confirms attacks, a backdoor and a wiper

N-central: N-able ships a critical update after exploits for its RMM platform go public

Xen Orchestra: an exploited authentication bypass gives attackers admin rights over XCP-ng virtualisation

FreeSWITCH: a single SIP message can run commands on the server, and the flaw is being exploited

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

cPGuard: a hijacked update channel pushed a root backdoor to about 2,950 Linux servers

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

openSUSE gstreamer-plugins-bad Important Buffer Overflow Issues 2026-3125-1

Ubuntu libXfont Important Denial Of Service Heap Overflow Vuln 8560-1

Ubuntu 26.04 LTS rlottie Critical Denial of Service USN-8559-1

openSUSE Containerized Data Importer Moderate Threat Advisory 2026-11305-1

openSUSE Tumbleweed kubevirt-container-disk Moderate CVE-2026-35469

openSUSE Tumbleweed php-composer2 Moderate CVE-2026-45793 Security Fix

openSUSE Tumbleweed wget Moderate Access Control Risk CVE-2026-15146

Fedora 44 python-uv-build Update Security Hardening FEDORA-2026-be84487fdd

Fedora 44 rust-astral_async_zip Key Update on ZIP Handling 2026-be84487fdd

Fedora 43 uv Update 0.11.28 Security Zip Handling Fix 2026-8893ec1aeb

Fedora 43 rust-astral_async_zip Important Zip Handling Fix 2026-8893ec1aeb

openSUSE Tumbleweed Chromedriver Moderate Update 2026-11309-1

openSUSE libsuricata8 Moderate Update Advisory 2026-11308-1

openSUSE Chromium Important Use After Free Vulnerabilities Vuln 2026-0254-1

Fedora 43 python-asyncssh Critical Unauthorized Access Fix 2026-574496d9ae

Fedora 44 python-asyncssh Important Unauthorized File Write CVE-2026-54590

Fedora 44 mbedtls 3.6.7 Critical Update DoS Buffer Overflow Fixes

openSUSE python-django-haystack Important Remote Code Exec Vuln 2026-0252-1

Debian tiff Critical Denial of Service or Code Exec Advisory DSA-6392-1

Debian Roundcube Critical Account Takeover Denial of Service Fix DSA-6391-1

openSUSE Python-Weasyprint Moderate CSS Injection CVE-2026-49452

openSUSE Tumbleweed kbfs Security Advisory 2026-11306-1 CVE 2026-39824

openSUSE Nginx New Moderate Update Advisory Released 2026-11295-1

openSUSE Tumbleweed Blender Moderate Security Issue Advisory 2026-11288-1