VulnerabilitiesCVE-2026-125881CVSS 9.34 min read
N-able says every unauthenticated flaw in the Able2Shell dump is fixed in N-central 2026.4 HF2, and that it has seen scanning but no compromise of hosted servers. The authenticated bugs are still open.
VulnerabilitiesCVE-2026-125883CVSS 9.34 min read
N-able released N-central 2026.4 HF2 for seven flaws disclosed publicly on November 8, after taking hosted environments offline and telling on-premises customers to do the same.
VulnerabilitiesExploitedCVE-2026-35273CVSS 9.82 min read
Researchers say the PeopleSoft bug ShinyHunters has exploited since May is a chain of three flaws, all patched under one CVE identifier in June. The root is an SSRF that reaches an internal management interface.
VulnerabilitiesExploitedCVE-2026-96652CVSS 5.32 min read
The agency's Tuesday update covers four Plex Media Server vulnerabilities grouped as Plex2Shell, alongside Siemens and SiteGuard flaws, and sets a federal remediation deadline.
VulnerabilitiesCVE-2026-76299CVSS 9.91 min read
Splunk fixed 16 CVEs in Enterprise and 15 in SOAR, including critical access control and data exposure bugs, while SolarWinds patched a high-severity authorization flaw in Observability.
VulnerabilitiesExploitedCVE-2026-21589CVSS 9.32 min read
SecurityWeek counted 162 high-severity and 14 critical-severity entries across Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira Software and Jira Service Management.
