Palo Alto confirms PAN-OS Brotli vulnerability CVE-2026-111497, a CVSS 9.2 buffer overflow in PAN-OS 12.2, 12.1 and 11.2. Install the hotfixes now.

Related Posts:

• Apple iOS 27.2 Update Fixes 160 Security Flaws
• CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface
• Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones

The post Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS appeared first on Daily CyberSecurity.

A critical Ghostscript vulnerability, CVE-2026-39919 (CVSS 9.8), allows remote code execution via crafted PDFs. Update Ghostscript to 10.08.0 now.

Related Posts:

• SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs
• IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service
• Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files

The post Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution appeared first on Daily CyberSecurity.

Moxa MGate vulnerabilities CVE-2026-86325 (CVSS 9.4) and CVE-2026-86326 hit MGate protocol gateway firmware. See affected versions and fixes.

Related Posts:

• Citrix NetScaler CVE-2026-88779 Exploited in the Wild to Knock SAML Gateways Offline
• Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server
• Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

The post Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk appeared first on Daily CyberSecurity.

Technical details and a PoC for a critical Fluent Bit vulnerability (CVE-2026-61674) are public. Patch this Fluent Bit vulnerability to prevent RCE attacks.

Related Posts:

• Ansible Automation Platform Vulnerabilities Allow Exploits
• CVE-2026-48842: Roundcube Webmail Vulnerability Exploited in the Wild
• Critical Rancher XSS Vulnerability Exposes Admin Credentials

The post Fluent Bit Vulnerability Details and PoC Disclosed appeared first on Daily CyberSecurity.

Public PoC exploit details emerge for critical D-Link DIR-822A vulnerabilities. Learn how these D-Link DIR-822A vulnerabilities impact unpatched devices.

Related Posts:

• Actively Exploited Veeam Agent Vulnerability PoC Disclosed
• Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10
• Pega Platform SAML Authentication Bypass: Critical 9.5 Flaw Patched

The post D-Link DIR-822A Vulnerabilities Details and PoC Disclosed appeared first on Daily CyberSecurity.

CISA warned of an exploited Zyxel switch vulnerability in GS1900 devices. Patch the Zyxel switch vulnerability now to prevent network compromise.

Related Posts:

• Actively Exploited Veeam Agent Vulnerability PoC Disclosed
• Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10
• D-Link DIR-822A Vulnerabilities Details and PoC Disclosed

The post Exploited Zyxel Switch Vulnerability Added to CISA KEV appeared first on Daily CyberSecurity.

Critical IBM MQ vulnerabilities allow remote code execution. Learn how CVE-2026-10747 and CVE-2026-10858 hit 10.0 CVSS and require urgent patching.

Related Posts:

• FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto
• Critical IBM Guardium Vulnerabilities Need Immediate Patching
• Critical MongoDB Driver Vulnerabilities Require Immediate Patching

The post Critical IBM MQ Vulnerabilities CVE-2026-10747 Hit 10 CVSS appeared first on Daily CyberSecurity.

A Ghostscript buffer overflow enables unauthenticated remote code execution. Patch this Ghostscript buffer overflow flaw (CVE-2026-39919) immediately.

Related Posts:

• Linux Kernel Vulnerabilities Exploited in the Wild
• Synology DSM Patches 8 Flaws, Two Critical Unauthenticated
• Critical HCL BigFix Vulnerabilities Expose Admin Accounts

The post CVE-2026-39919: Ghostscript Flaw Allows Unauthenticated Remote Code Execution appeared first on Daily CyberSecurity.