VulnerabilitiesCVE-2026-125881CVSS 9.34 min read
N-able says every unauthenticated flaw in the Able2Shell dump is fixed in N-central 2026.4 HF2, and that it has seen scanning but no compromise of hosted servers. The authenticated bugs are still open.
VulnerabilitiesCVE-2026-125883CVSS 9.34 min read
N-able released N-central 2026.4 HF2 for seven flaws disclosed publicly on November 8, after taking hosted environments offline and telling on-premises customers to do the same.
VulnerabilitiesBrief2 min read
Defiant says threat actors began hitting a race condition in WordPress's update process within hours of the fix, though the exploit window is narrow and no successful compromises are reported.
VulnerabilitiesCVE-2026-76299CVSS 9.91 min read
Splunk fixed 16 CVEs in Enterprise and 15 in SOAR, including critical access control and data exposure bugs, while SolarWinds patched a high-severity authorization flaw in Observability.
VulnerabilitiesCVE-2026-108097CVSS 8.12 min read
Drupal shipped fixes for five vulnerabilities, including two critical remote code execution flaws that need contributed modules to be reachable, and urged admins to make time for core updates.
