Skip to main content

Veeam Patches Critical Unauthenticated Authorization Bypass in Backup & Replication 13 (CVE-2026-108142)

Scope: Veeam Backup & Replication 13.1.1.18 and earlier (13.1 branch), 13.0.2.29 and e

Apple Backports CoreGraphics Zero-Day Patch to Older iPhones Following Targeted Spyware Attacks

Scope: Older iPhones and iPads that did not receive last month’s CoreGraphics fix

Microsoft Pushes Out-of-Band Windows Update to Distrust Compromised eMudhra Certificate Authority Keys

Scope: Windows systems not receiving automatic certificate trust list updates

Tailscale Officially Confirms Nearly a Dozen SSH and Networking Vulnerabilities, Patches in Progress

Scope: Tailscale SSH, serve, app connector, DERP relay client, and headscale self-hosted s

Cisco Patches Five Critical Nexus Switch Flaws Enabling Root Code Execution (NX-OS)

Scope: Cisco NX-OS data center network operating system, affecting Cisco Nexus switch prod

“Plex2Shell”: Chained Vulnerabilities in Plex Media Server Allow Unauthenticated Full Compromise, Federal Deadline Already Passed

Scope: Plex Media Server (all versions prior to the patched release)

F5 Releases Out-of-Band Patches for Three Critical NGINX Vulnerabilities (CVE-2026-15176 / CVE-2026-93479 / CVE-2026-97205)

Scope: NGINX Plus, NGINX Open Source, NGINX Ingress Controller, NGINX Gateway Fabric, and

Subscribe to Advisories