Cisco Patches Five Critical Nexus Switch Flaws Enabling Root Code Execution (NX-OS)

Scope: Cisco NX-OS data center network operating system, affecting Cisco Nexus switch product lines

Severity: Red

Read More

F5 Releases Out-of-Band Patches for Three Critical NGINX Vulnerabilities (CVE-2026-15176 / CVE-2026-93479 / CVE-2026-97205)

Scope: NGINX Plus, NGINX Open Source, NGINX Ingress Controller, NGINX Gateway Fabric, and NGINX Instance Manager

Severity: Red

Read More

“Plex2Shell”: Chained Vulnerabilities in Plex Media Server Allow Unauthenticated Full Compromise, Federal Deadline Already Passed

Scope: Plex Media Server (all versions prior to the patched release)

Severity: Red

Read More

PHP2Shell Escalates: Millions of Exploitation Attempts, Mirai Deployment Attempts, and a Confirmed Government Breach Over the Weekend (CVE-2026-109618 / CVE-2026-109619)

Scope: PHP versions 5.4 through 8.5, patched in 8.5.12, 8.4.27, 8.3.36, and 8.2.35

Severity: Red

Read More

“Tailworm”: 11 Unpatched Tailscale SSH and Networking Flaws Published Without Coordinated Disclosure

Scope: Tailscale SSH, serve, app connector, and DERP relay client (tested against Tailscale 1.104.2); headscale 0.29.5 self-hosted server

Severity: Amber

Read More

Node.js “Node2Shell” Brotli Decoder Flaw Enables Remote Code Execution Across All Supported Release Lines (CVE-2026-111497)

Scope: Node.js 22.x prior to 22.23.4, 24.x prior to 24.22.1, and 26.x prior to 26.12.1

Severity: Red

Read More