Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current release of...
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
FreePBX 17.0.2 - Remote Code Execution (RCE)