https://onurbaydas.com/en/tags/vulnerability/Recent content in Vulnerability on Onur BaydaşHugoen-usSat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-atlassian-products-file-access-vulnerability/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-atlassian-products-file-access-vulnerability/A vulnerability has been identified in multiple Atlassian Data Center products, allowing an unauthenticated attacker to access specific files within the web application root directory. This vulnerability is listed in the CISA KEV catalog and is actively being exploited in the wild.https://onurbaydas.com/en/news/2026-10-17-beyondtrust-zero-day-edge/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-beyondtrust-zero-day-edge/A zero-day vulnerability has been found in BeyondTrust's remote support products, following similar exploits in edge devices from Ivanti, Cisco, and Palo Alto Networks. This indicates a continuing trend of critical network edge devices being targeted for exploitation.https://onurbaydas.com/en/news/2026-10-17-magento-blockstrap-rce-vulnerability/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-magento-blockstrap-rce-vulnerability/Researchers are warning about a critical vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce. This flaw could allow attackers to execute arbitrary PHP code on store servers.https://onurbaydas.com/en/news/2026-10-17-openbsd-kernel-bug-exploit/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-openbsd-kernel-bug-exploit/This report details how a 37-year-old kernel bug in OpenBSD was exploited. It highlights critical security vulnerabilities that can remain hidden in long-standing codebases.https://onurbaydas.com/en/news/2026-10-17-fortinet-path-traversal-cisa-kev/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-fortinet-path-traversal-cisa-kev/CISA is warning about an actively exploited path traversal vulnerability (CVE-2025-61624) in multiple Fortinet products. This flaw could allow an authenticated attacker to write or delete arbitrary files.https://onurbaydas.com/en/news/2026-10-17-almalinux-security-updates/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-almalinux-security-updates/Security updates have been released for various packages in AlmaLinux. These updates are critically important for enhancing system security.https://onurbaydas.com/en/news/2026-10-17-linux-kernel-critical-vulnerability-fix/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-linux-kernel-critical-vulnerability-fix/Greg Kroah-Hartman has announced seven new stable kernel releases. These releases include a fix for a critical vulnerability (CVE-2026-99999).https://onurbaydas.com/en/news/2026-10-16-beyondtrust-zero-day-patch/Fri, 16 Oct 2026 19:56:22 +0300https://onurbaydas.com/en/news/2026-10-16-beyondtrust-zero-day-patch/BeyondTrust warned customers and released a patch for a critical zero-day flaw in its Remote Support (RS) software. This vulnerability had been actively exploited in attacks since late August.https://onurbaydas.com/en/news/2026-10-16-beyondtrust-zero-day-exploit/Fri, 16 Oct 2026 19:56:22 +0300https://onurbaydas.com/en/news/2026-10-16-beyondtrust-zero-day-exploit/A China-linked cyber espionage group, Armory Castle, exploited a zero-day vulnerability in BeyondTrust Remote Support in August 2026. This flaw led to the takeover of remote support servers.https://onurbaydas.com/en/news/2026-10-16-fortios-peerstitch-malware/Fri, 16 Oct 2026 19:56:22 +0300https://onurbaydas.com/en/news/2026-10-16-fortios-peerstitch-malware/An advanced threat actor exploited a Fortinet FortiOS vulnerability to deploy a new ARM64 malware called PEERSTITCH. This malware is capable of bypassing checks on tagged VPN sessions.https://onurbaydas.com/en/news/2026-10-16-collabora-nextcloud-rce-exploit/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-collabora-nextcloud-rce-exploit/Threat actors are exploiting a critical remote code execution (RCE) flaw in the Collabora Online app for Nextcloud. This vulnerability, tracked as CVE-2026-110447, is being used to backdoor Nextcloud servers.https://onurbaydas.com/en/news/2026-10-16-ghostscript-rce-pdf-vulnerability/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-ghostscript-rce-pdf-vulnerability/A critical heap buffer overflow vulnerability (CVE-2026-39919) has been found in the Ghostscript interpreter. This flaw allows remote code execution through specially crafted PDF files.https://onurbaydas.com/en/news/2026-10-16-microsoft-patch-tuesday-october-2026/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-microsoft-patch-tuesday-october-2026/Microsoft's October 2026 Patch Tuesday updates addressed a record-breaking 1,411 security flaws. These updates include one actively exploited and two publicly disclosed zero-day vulnerabilities.https://onurbaydas.com/en/news/2026-10-16-microsoft-patch-tuesday-record/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-microsoft-patch-tuesday-record/Microsoft released patches for a record 1,413 vulnerabilities during Patch Tuesday. Among these patches is a Windows Shell bug that has been actively exploited.https://onurbaydas.com/en/news/2026-10-16-nextjs-rce-caching-svg-patch/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-nextjs-rce-caching-svg-patch/Next.js released an out-of-band security update on October 14, fixing two critical unauthenticated remote code execution (RCE) flaws. Additionally, a high-severity denial-of-service (DoS) vulnerability was also addressed with this patch.https://onurbaydas.com/en/news/2026-10-16-nginx-security-vulnerabilities-patch/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-nginx-security-vulnerabilities-patch/NGINX released versions 1.30.6 and 1.31.7 on October 14, fixing five vulnerabilities. One of these flaws had been present in every release since May 2005.https://onurbaydas.com/en/news/2026-10-16-threatsday-security-roundup/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-threatsday-security-roundup/This week, various security threats emerged, including Adobe RCE vulnerabilities, DNS-based wallet theft, and NVIDIA container escape. A data theft tool with a victim-scaring feature also stands out among this week's security stories.