Cyber alerts

105 results

May 2026

Published Friday 8 May 2026 (01:36) (updated 14 May 2026)

Proof-of-Concept Exploit Released for Three Vulnerabilities in the Linux Kernel

Successful exploitation of CVE-2026-46300, CVE‑2026‑43284, and CVE‑2026‑43500 in Linux distributions could allow an unprivileged attacker to achieve root privileges on the system

CC-4778 Medium

Published Thursday 7 May 2026 (02:38) (updated 7 May 2026)

Apache Releases Security Update for Apache HTTP Server (HTTP/2)

CVE‑2026‑23918 could allow remote unauthenticated attackers to achieve remote code execution or denial‑of‑service on Apache HTTP Server

CC-4777 High

Published Wednesday 6 May 2026 (01:00) (updated 1 June 2026)

Palo Alto Networks Releases Security Advisory for Critical Vulnerability in PAN‑OS

CVE‑2026‑0300 enables unauthenticated remote code execution with root privileges on exposed Palo Alto PAN‑OS firewalls

April 2026

CC-4776 Medium

Published Thursday 30 April 2026 (04:32) (updated 5 May 2026)

Active Exploitation of Local Privilege Escalation Vulnerability in the Linux Kernel

CVE-2026-31431 (dubbed "Copy Fail") affects all Linux kernel builds since 2017, and could allow a local, unprivileged attacker to escalate privileges to root.

CC-4775 Medium

Published Thursday 30 April 2026 (01:15) (updated 30 April 2026)

SonicWall Releases Security Updates for SonicOS

CVE-2026-0204 could allow an unauthenticated attacker to access certain management interface functions

CC-4774 High

Published Thursday 30 April 2026 (11:34) (updated 30 April 2026)

Critical Vulnerability in cPanel and Web Host Manager (WHM)

CVE-2026-41940 could allow unauthenticated remote attackers to gain unauthorised access on the affected cPanel management console

CC-4773 Medium

Published Wednesday 22 April 2026 (01:16) (updated 22 April 2026)

Oracle Releases April 2026 Critical Patch Update Advisory

Scheduled advisory includes 481 security updates across multiple Oracle product families

CC-4772 Medium

Published Thursday 16 April 2026 (02:03) (updated 16 April 2026)

Cisco Releases Security Advisories for Critical Vulnerabilities in Identity Services Engine

An authenticated attacker could exploit the vulnerabilities to achieve remote code execution

CC-4771 Medium

Published Wednesday 15 April 2026 (03:48) (updated 24 April 2026)

Microsoft Releases April 2026 Security Updates

Scheduled updates for Microsoft products address 165 vulnerabilities, including CVE‑2026‑32201, an exploited spoofing vulnerability affecting SharePoint Server

CC-4770 Medium

Published Tuesday 14 April 2026 (11:47) (updated 14 April 2026)

Axios Releases Security Update to Address Critical Vulnerability

CVE‑2026‑40175 could be used in an attack chain to allow for remote code execution or full cloud compromise