https://vulnpost.com/news/vulnerabilities/oneplus-oxygenos-flaw-exposes-dangerous-methods/Vuln Posten2026-10-21T20:26:17ZOnePlus OxygenOS Flaw Exposes Dangerous Methods on Older Android Versionshttps://vulnpost.com/news/vulnerabilities/shopper-cms-cve-2026-114387-missing-authorization/Vuln Posten2026-10-21T20:06:02ZShopper CMS CVE-2026-114387 Missing Authorization Flaw Allows Admin Escalationhttps://vulnpost.com/news/vulnerabilities/cisco-expressway-x8-fixes-high-severity-out-of/Vuln Posten2026-10-21T18:19:46ZCisco Expressway X8 Fixes High-Severity Out-of-Bounds Write in Hardening Updateshttps://vulnpost.com/news/vulnerabilities/virtualenv-21-14-1-fixes-high-severity-code/Vuln Posten2026-10-21T18:01:11Zvirtualenv 21.14.1 fixes high-severity code execution in Fish shell activationhttps://vulnpost.com/news/vulnerabilities/follow-redirects-cve-2026-111755-regex-flaw-leaks/Vuln Posten2026-10-21T09:40:33Zfollow-redirects CVE-2026-111755: Regex flaw leaks headers with pipes/carets during cross-origin redirectshttps://vulnpost.com/news/vulnerabilities/chrome-156-skia-memory-corruption-fixes-address/Vuln Posten2026-10-21T08:27:38ZChrome 156 Skia Memory Corruption Fixes Address 353 Desktop Security Flawshttps://vulnpost.com/news/vulnerabilities/argo-cd-kustomize-flaw-enables-critical-rce-on/Vuln Posten2026-10-21T07:47:21ZArgo CD Kustomize Flaw Enables Critical RCE on Repo Servers; Patches Availablehttps://vulnpost.com/news/vulnerabilities/ibm-app-connect-enterprise-flaw-allows-remote/Vuln Posten2026-10-21T06:58:19ZIBM App Connect Enterprise Flaw Allows Remote Data Theft via IP Bindinghttps://vulnpost.com/news/vulnerabilities/php-critical-rce-flaws-prompt-emergency-patch-for/Vuln Posten2026-10-21T06:12:34ZPHP Critical RCE Flaws Prompt Emergency Patch for Supported Versionshttps://vulnpost.com/news/vulnerabilities/totolink-x2000r-router-rce-vulnerability-allows/Vuln Posten2026-10-21T03:45:17ZTotolink X2000R Router RCE Vulnerability Allows Arbitrary Code Execution Via HTTP Requesthttps://vulnpost.com/news/vulnerabilities/pillow-13-0-0-fixes-high-severity-heap-buffer/Vuln Posten2026-10-21T03:33:17ZPillow 13.0.0 Fixes High-Severity Heap Buffer Over-Read in TIFF Decoderhttps://vulnpost.com/news/vulnerabilities/php-remote-code-execution-flaws-emergency-patches/Vuln Posten2026-10-21T02:46:49ZPHP Remote Code Execution Flaws: Emergency Patches Scheduled for October 21https://vulnpost.com/news/vulnerabilities/totolink-x2000r-stack-overflow-in-boa-formipqos/Vuln Posten2026-10-21T02:30:30ZTotolink X2000R Stack Overflow in boa formIpQos Enables Arbitrary Code Executionhttps://vulnpost.com/news/vulnerabilities/totolink-x2000r-ipv6-config-buffer-overflows/Vuln Posten2026-10-21T01:14:54ZTotolink X2000R IPv6 Config Buffer Overflows Enable Authenticated Remote Code Executionhttps://vulnpost.com/news/vulnerabilities/totolink-x2000r-pppoe-stack-overflow-bugs-enable/Vuln Posten2026-10-21T00:28:21ZTotolink X2000R PPPoE Stack Overflow Bugs Enable Authenticated Code Executionhttps://vulnpost.com/news/vulnerabilities/oracle-e-business-suite-tcf-servlet-sql-injection/Vuln Posten2026-10-21T00:04:30ZOracle E-Business Suite TCF Servlet SQL Injection Allows Remote Code Executionhttps://vulnpost.com/news/vulnerabilities/oracle-october-cpu-fixes-1209-cves-with-112/Vuln Posten2026-10-20T22:39:35ZOracle October CPU Fixes 1209 CVEs With 112 Critical Patcheshttps://vulnpost.com/news/vulnerabilities/apache-tomcat-http-2-async-flaw-mixes-user/Vuln Posten2026-10-20T18:15:50ZApache Tomcat HTTP/2 Async Flaw Mixes User Requestshttps://vulnpost.com/news/vulnerabilities/go-1-27-3-and-1-26-10-released-for-ca-certificate/Vuln Posten2026-10-20T18:12:53ZGo 1.27.3 and 1.26.10 Released for CA Certificate Removalhttps://vulnpost.com/news/vulnerabilities/apache-tomcat-jstl-plug-in-has-low-severity/Vuln Posten2026-10-20T17:57:31ZApache Tomcat JSTL Plug-in Has Low-Severity Execution After Redirect Flawhttps://vulnpost.com/news/vulnerabilities/openstack-cinder-messages-api-flaw-leaks-cross/Vuln Posten2026-10-20T17:28:55ZOpenStack Cinder Messages API flaw leaks cross-project datahttps://vulnpost.com/news/vulnerabilities/openstack-manila-fixes-cross-project-share/Vuln Posten2026-10-20T17:27:32ZOpenStack Manila Fixes Cross-Project Share Metadata Flaw in CVE-2026-71195https://vulnpost.com/news/vulnerabilities/roundcube-webmail-patches-command-injection-and/Vuln Posten2026-10-20T17:02:45ZRoundcube Webmail Patches Command Injection and XSS Flawshttps://vulnpost.com/news/vulnerabilities/mozilla-issues-guidance-following-emudhra/Vuln Posten2026-10-20T16:51:25ZMozilla Issues Guidance Following eMudhra Intermediate Certificate Compromisehttps://vulnpost.com/news/vulnerabilities/threadx-buffer-validation-flaw-allows-out-of/Vuln Posten2026-10-20T15:42:32ZThreadX Buffer Validation Flaw Allows Out-of-Bounds Memory Accesshttps://vulnpost.com/news/vulnerabilities/advantech-adam-3600-patch-fixes-remote-code/Vuln Posten2026-10-20T09:57:59ZAdvantech ADAM-3600 Patch Fixes Remote Code Execution Flaw CVE-2026-43857https://vulnpost.com/news/vulnerabilities/advantech-adam-3600-patch-fixes-path-traversal/Vuln Posten2026-10-20T09:37:50ZAdvantech ADAM-3600 Patch Fixes Path Traversal Flaw CVE-2026-43851https://vulnpost.com/news/vulnerabilities/advantech-adam-3600-patch-fixes-unauthenticated/Vuln Posten2026-10-20T08:39:42ZAdvantech ADAM-3600 Patch Fixes Unauthenticated Crash Vulnerabilityhttps://vulnpost.com/news/vulnerabilities/riskified-united-utilities-toyota-logistics-hire/Vuln Posten2026-10-20T04:39:14ZRiskified, United Utilities, Toyota Logistics hire security leaders for app, cloud, and CISO roleshttps://vulnpost.com/news/vulnerabilities/eptura-archibus-critical-rce-unauthenticated/Vuln Posten2026-10-20T03:23:43ZEptura Archibus Critical RCE: Unauthenticated Attackers Can Control Servers via Rapid7-Found Flawhttps://vulnpost.com/news/vulnerabilities/pillow-ghostscript-argument-injection-cve-2026/Vuln Posten2026-10-20T02:31:44ZPillow Ghostscript Argument Injection CVE-2026-112900 Patched in Version 13.0.0 Releasehttps://vulnpost.com/news/vulnerabilities/ning-compress-lzf-pre-1-2-0-oob-access-enables/Vuln Posten2026-10-20T02:21:42ZNing compress-lzf pre-1.2.0 OOB Access Enables JVM Heap Leak and Service Crash via CVE-2026-109395https://vulnpost.com/news/vulnerabilities/apache-camel-jgroups-deserialization-bug-cve-2026/Vuln Posten2026-10-20T01:57:46ZApache Camel JGroups Deserialization Bug CVE-2026-88900 Enables RCE, Patches Now Availablehttps://vulnpost.com/news/vulnerabilities/db-gpt-0-8-2-critical-flaw-allows-unauthenticated/Vuln Posten2026-10-20T01:31:37ZDB-GPT 0.8.2 Critical Flaw Allows Unauthenticated Remote Code Executionhttps://vulnpost.com/news/vulnerabilities/aiohttp-keepalive-flaw-lets-attackers-hoard/Vuln Posten2026-10-20T01:15:54Zaiohttp keepalive flaw lets attackers hoard server connectionshttps://vulnpost.com/news/vulnerabilities/ibm-security-verify-access-cve-2026-109126-allows/Vuln Posten2026-10-20T00:23:26ZIBM Security Verify Access CVE-2026-109126 Allows Physical Privilege Escalationhttps://vulnpost.com/news/vulnerabilities/h3c-magic-nx15-critical-rce-flaw-cve-2026-112371/Vuln Posten2026-10-20T00:03:43ZH3C Magic NX15 Critical RCE Flaw CVE-2026-112371 Allows Arbitrary Code Executionhttps://vulnpost.com/news/vulnerabilities/pillow-apng-memory-exhaustion-vulnerability-fixed/Vuln Posten2026-10-19T23:48:43ZPillow APNG Memory Exhaustion Vulnerability Fixed in Version 13.0.0https://vulnpost.com/news/vulnerabilities/plex-media-server-rce-chain-deploys-cryptominers/Vuln Posten2026-10-19T23:39:38ZPlex Media Server RCE Chain Deploys Cryptominers on Unpatched Systemshttps://vulnpost.com/news/vulnerabilities/grav-api-plugin-vulnerability-lets-attackers/Vuln Posten2026-10-19T22:30:58ZGrav API Plugin Vulnerability Lets Attackers Drain Server Storage or Evade Page Ruleshttps://vulnpost.com/news/vulnerabilities/mercury-rce-bug-in-pre-3-2-6-lets-attackers-run/Vuln Posten2026-10-19T22:30:40ZMercury RCE Bug in Pre-3.2.6 Lets Attackers Run Python Code on Tokenless Servershttps://vulnpost.com/news/vulnerabilities/citrix-netscaler-rce-access-log-poisoning-enables/Vuln Posten2026-10-19T21:36:57ZCitrix NetScaler RCE: Access-Log Poisoning Enables Unauthenticated Root Access via CVE-2026-88771https://vulnpost.com/news/vulnerabilities/craft-cms-twig-filter-flaw-allows-remote-code/Vuln Posten2026-10-19T20:41:27ZCraft CMS Twig Filter Flaw Allows Remote Code Execution