Ubuntu USN-8958-1 fixes three .NET flaws, one exploited

Ubuntu USN-8958-1 patches three .NET flaws, including the exploited Brotli bug CVE-2026-111497. See who is affected and how to check your hosts.

Linux kernel TCP flaw CVE-2026-98432 scores 9.8

CVE-2026-98432 is a critical Linux kernel TCP use after free affecting Ubuntu and Red Hat. See how to check your servers and what to watch for in updates.

GitLab CVE-2026-97229: exploited critical flaw, how to fix it

CVE-2026-97229 is an exploited, critical GitLab flaw that allows remote code execution. See affected versions, how to check a server and how to upgrade.

Cisco ASA and FTD flaw CVE-2026-76418 is exploited

CISA lists Cisco ASA and FTD flaw CVE-2026-76418 as exploited. It can crash firewalls through the VPN service. See who is affected and what we do not cover.

VMware ESX logging flaw CVE-2026-41709 is now exploited

CISA lists VMware ESX flaw CVE-2026-41709 as exploited. It is low severity but hides admin actions. See what to check and what we do not cover.

Ubuntu USN-8956-2 brings the Brotli fix to older LTS releases

Ubuntu notice USN-8956-2 extends the Brotli fix to older LTS releases. See who is affected and how to check a server.

Linux kernel flaw CVE-2026-46300 joins CISA's exploited list

CISA lists Linux kernel flaw CVE-2026-46300 as exploited and chainable with PHP bugs. See fixed kernels and how to check your servers.

RHEL 8 end of life: dates and what to upgrade to

RHEL 8 end of life dates, what each support phase means, what to upgrade to, and how to check a server by hand and with Stackurity.

ProFTPD CVE-2015-3306: exploited mod_copy flaw, how to mitigate

CVE-2015-3306 is an exploited, critical ProFTPD mod_copy flaw. See who is affected, how to check a server by hand and how to mitigate it.

CISA adds Adobe Commerce and Magento flaw CVE-2026-48356 to exploited list

CISA lists the Adobe Commerce and Magento upload flaw CVE-2026-48356 as exploited. See how to check your stores and where the fix comes from.

CISA adds two PHP remote code execution flaws to its KEV list

Two PHP flaws, CVE-2026-109618 and CVE-2026-109619, are now in CISA's exploited catalogue. See the fixed PHP versions and how to check.

Ubuntu patches five nginx vulnerabilities in USN-8955-1

Ubuntu notice USN-8955-1 fixes five nginx flaws, including crashes, possible code execution and forged client sessions. See how to check.

Actively Exploited

Brotli CVE-2026-111497: exploited decoder flaw, how to fix it

CVE-2026-111497 is an exploited, critical Brotli decoder overflow. See which versions are affected, how to check a server and how to update.