Security alerts and urgent notes on vulnerabilities that affect websites and servers, with what to do now.
Alerts ·
Attackers tried to exploit a critical GitLab flaw on Alpine Linux's development infrastructure. The project rebuilt its server and reset all passwords. Self-hosted GitLab operators should patch and check for compromise.
Alerts ·
A race condition in WordPress core upgrades (CVE-2026-119977) lets unauthenticated attackers run code on the server during the upgrade window. CISA confirms active exploitation.
Alerts ·
A new WordPress update closes several vulnerabilities, including one that allows injecting malicious code. Exploitation attempts are already being observed, so sites should be updated without delay.
Alerts ·
A missing authorization check in Drupal Commerce Core (CVE-2026-118539) is being exploited in attacks. Shops running Commerce Core up to 2.41 or 3.0.0 to 3.3.13 should update the module now.
Alerts ·
Several vulnerabilities described as critical affect WatchGuard Fireware OS on WatchGuard security appliances. Updates are available and administrators should apply them soon.
Alerts ·
An actively exploited flaw in Cisco Secure Firewall ASA and FTD software lets unauthenticated remote attackers force the device to reload, which cuts off traffic to the servers behind it. Apply Cisco's fix now.
Alerts ·
Twenty vulnerabilities in 19 WordPress plugins were disclosed between 28 and 31 October 2026. The most serious is an authentication bypass in Uncanny Toolkit for LearnDash (CVSS 9.8). W3 Total Cache, Ninja Forms and Kirki are also affected.
Alerts ·
Tailscale 1.104.4 fixes flaws in how Tailscale SSH forwards connections. Because the SSH server runs as root, an attacker could reach root-only services and files on other servers. Update all nodes that use Tailscale SSH.
Alerts ·
Vulnerabilities have been disclosed in ten WordPress plugins, most of them exploitable without logging in. The most serious is a critical remote code execution flaw in Project Manager.
Alerts ·
A campaign active since July 2025 has infected 953 online stores, mostly Magento. It serves a malicious JavaScript loader through CMS blocks. Shop operators should inspect their blocks and admin access now.
Alerts ·
An unchecked return value in the Google Brotli decoder, used by Node.js, lets remote attackers corrupt memory with a crafted compressed stream. It is actively exploited. Update Node.js and system Brotli packages now.
Alerts ·
A critical memory corruption flaw in PHP (CVE-2026-109618, CVSS 9.8) lets unauthenticated attackers execute code remotely and is already being exploited. Update PHP on all servers now.
You came through a link of one of our partners. With your consent we remember this in a cookie for 90 days, so the person who recommended us receives their commission even if you sign up later. It costs you nothing.
Privacy policyThese are all cookies and browser entries we use on centoculus.com and app.centoculus.com. We use no analytics or advertising cookies and load no third-party services. Necessary cookies keep forms and sign-in working; partner attribution is only set with your consent.
These cookies and entries are needed to run the website and the service and cannot be switched off. They are not used for advertising or analytics.
Remembers the code of the partner whose link you came through for 90 days. If you sign up within this time, your account is assigned to that partner and they receive a commission. Without consent only the code in the address or a promo code you enter yourself counts.
You can change or withdraw your choice at any time under "Cookie settings" at the bottom of every page. Privacy policy