Skip to main content

LMCache Unauthenticated RCE Finally Patched in Version 0.5.6 (CVE-2026-105192)

Scope: LMCache (distributed key-value cache layer for the vLLM inference engine), versions

Qilin and INC Ransomware Groups Continue Exploiting Patched Palo Alto Flaw, Now Pivoting Directly to Virtualization Layer (CVE-2026-0257)

Scope: Palo Alto Networks PAN-OS and Prisma Access (patched since May 2026)

PHP Ships Emergency Out-of-Cycle Patch Today for Two Critical RCE Flaws After Early Leak (“PHP2Shell”)

Scope: PHP branches 8.2 through 8.5 (older unsupported branches receive no fix)

Siemens Confirms Software Center DLL Sideloading Flaw Exploited to Smuggle Malware via a Trusted Signed App (CVE-2026-110936)

Scope: Siemens Software Center, all versions prior to V4.0.9.8

Redis RESTORE Command Flaw Exploited Five Months After Patch Was Available (CVE-2026-25243)

Scope: Redis redis-server, all versions prior to 8.6.3 (fixed in 6.2.22, 7.2.14, 7.4.9, an

Oracle Releases October 2026 Critical Patch Update With 109 PeopleSoft Fixes Alone

Scope: Oracle Database, E-Business Suite, PeopleSoft, Oracle Communications, Oracle Analyt

PEERSTITCH Memory-Resident Implant Deployed via Chained FortiManager and FortiOS Flaws, Federal Deadline Today (CVE-2025-61624)

Scope: Fortinet FortiOS and FortiManager, devices previously exposed to the FortiJump vuln

Subscribe to Advisories