For roughly 18 years, a chunk of code inside one of the internet’s most popular web servers quietly carried a critical ...

NGINX Rift CVE-2026-42945 scores 9.2 after 18 years, enabling unauthenticated RCE or DoS via crafted HTTP requests.

Exim has released security updates to address a severe security issue affecting certain configurations that could enable ...

Fortinet has released security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could ...

Microsoft patches a critical Outlook vulnerability tracked as CVE-2026-40361 that can be exploited for remote code execution.

‘All versions of Red Hat Enterprise Linux (RHEL) are affected by [the vulnerabilities] but are not vulnerable in their default configurations,’ the IBM-owned company said. Red Hat warned Thursday that ...

Today is Microsoft's May 2026 Patch Tuesday, with security updates for 120 flaws and no zero-days disclosed this month.

Google announced on Monday the release of an Android update patching a critical vulnerability that can be exploited for ...

Mozilla has patched a critical security vulnerability in its Firefox Web browser that's being actively exploited in the wild. Tracked as CVE-2024-9680, the vulnerability is a use-after-free issue in ...

The vulnerability represents a bypass of fixes put in place this year for three critical RCE flaws that had the same root cause and have since been used in attacks. Developers of Apache OFBiz, an open ...