The SonicWall GMS vulnerabilities patch notice details two critical SonicWall GMS vulnerabilities. Migrate EOL systems to Network Security Manager now.

Related Posts:

• Rails 8.0.5.2 and 8.1.4.1 Fix 21 Security Flaws, Including Critical Active Storage File Write Bug
• SnappyMail Remote Code Execution Chain Disclosed With Public PoC Exploit Code
• Airbyte Vulnerability Exploited in the Wild Lets Attackers Run Code in Connector Builder

The post Critical Unpatched SonicWall GMS Vulnerabilities Disclosed appeared first on Daily CyberSecurity.

The ASF patched Apache security vulnerabilities with new Apache security fixes for Syncope, Arrow, and Fineract, including critical flaw CVE-2026-64618.

Related Posts:

• Ubuntu Kernel Fixes for CVE-2026-98432 (CVSS 9.8) Land in Proposed Pocket
• cPGuard Supply Chain Attack Pushes Backdoor Through Update Channel
• TeamViewer Client Vulnerability Enables Remote Code Execution

The post Critical Apache Security Vulnerabilities Patched in Core Projects appeared first on Daily CyberSecurity.

Upgrade to Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 CVSS RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.

Related Posts:

• Apple iOS 27.2 Update Fixes 160 Security Flaws
• CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface
• Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones

The post Mautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection Vulnerabilities appeared first on Daily CyberSecurity.

Arista says VeloCloud Orchestrator vulnerability CVE-2026-114625, a CVSS 9.9 SQL injection, is exploited in the wild. Upgrade on-prem VCO now.

Related Posts:

• PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
• LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
• Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates

The post Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild appeared first on Daily CyberSecurity.

MariaDB critical vulnerabilities, including CVE-2026-92262 (CVSS 9.9), risk remote code execution. Upgrade to the October 2026 releases.

Related Posts:

• Atlassian Patches 176 Flaws in Jira, Confluence and Other Data Center Products
• Oracle E-Business Suite Flaw CVE-2026-101809 Scores CVSS 10.0
• Apache CouchDB 3.5.3 Fixes Six Flaws as Retired Apache Cocoon Gets Four Unpatched Bugs

The post MariaDB Fixes Three CVSS 9.9 Flaws Among Seven New Vulnerabilities appeared first on Daily CyberSecurity.

Apache fixes 12 Apache Kylin vulnerabilities, including critical CVE-2026-64959, plus Apache Airflow SSH flaws. Upgrade Kylin to 5.0.5 now.

Related Posts:

• Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
• PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras

The post Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection, Plus Airflow and Answer Bugs appeared first on Daily CyberSecurity.

Update the Backuply WordPress plugin to 1.5.9 to fix CVE-2026-93953, a high-severity SQL injection vulnerability impacting 600,000 sites.

Related Posts:

• Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
• PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras

The post Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability appeared first on Daily CyberSecurity.

Eight SuiteCRM vulnerabilities, including a CVSS 9.4 remote code execution flaw and SQL injection bugs, are fixed. Upgrade to 8.10.2 or 7.15.2 now.

Related Posts:

• Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
• Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells
• Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)

The post SuiteCRM Patches Eight Vulnerabilities, Including Critical Remote Code Execution Flaw appeared first on Daily CyberSecurity.

The WordPress 7.1.3 security update is a WordPress security release that fixes stored XSS, SQL injection and more. Update your site now.

Related Posts:

• CVE-2026-21589 Exploited in the Wild as Atlassian File Read Flaw Details and PoC Go Public
• Elastic Patches 14 Flaws in Elasticsearch, Kibana and Elastic Defend
• ASUS Patches Four Router Firmware Flaws, Including Two Critical Bugs Rated CVSS 9.3

The post WordPress 7.1.3 Security Update Fixes Stored XSS, SQL Injection and Five More Flaws appeared first on Daily CyberSecurity.

ServiceNow has patched five critical ServiceNow vulnerabilities, including an unauthenticated SQL injection flaw. Update your instances to stay secure.

Related Posts:

• Critical ViewSonic vCast Vulnerabilities Enable Device Takeover
• MongoDB Driver Vulnerabilities Fixed Across Ecosystem
• High-Severity Apache Qpid Broker-J Vulnerabilities Fixed

The post Critical ServiceNow Vulnerabilities Fixed in AI Platform appeared first on Daily CyberSecurity.

An exploited Roundcube Webmail vulnerability allows SQL injection attacks. Learn how CVE-2026-48842 impacts servers and apply the latest patches immediately.

Related Posts:

• Ansible Automation Platform Vulnerabilities Allow Exploits
• Critical Rancher XSS Vulnerability Exposes Admin Credentials
• macOS DesktopServicesHelper LPE Vulnerability Details and PoC Disclosed

The post CVE-2026-48842: Roundcube Webmail Vulnerability Exploited in the Wild appeared first on Daily CyberSecurity.

HCL Software patched critical HCL BigFix vulnerabilities, including CVE-2026-67100 and CVE-2026-18963. Patch now to prevent total account takeovers.

Related Posts:

• Linux Kernel Vulnerabilities Exploited in the Wild
• Synology DSM Patches 8 Flaws, Two Critical Unauthenticated
• 4 Linux Kernel LPE Flaws Disclosed With Public PoC Exploits

The post Critical HCL BigFix Vulnerabilities Expose Admin Accounts appeared first on Daily CyberSecurity.