https://packettribune.com/topic/vulnerabilities/npm-follow-redirects-cve-2026-111756-cross-origin/Packet Tribuneen2026-10-21T08:56:43Znpm follow-redirects CVE-2026-111756: Cross-origin redirect flaw steals auth tokens via array headershttps://packettribune.com/topic/cyber-attacks/identity-theft-scheme-targets-us-servicemembers/Packet Tribuneen2026-10-21T08:56:32ZIdentity Theft Scheme Targets US Servicemembers and Veteranshttps://packettribune.com/topic/malware/safepay-ransomware-exploits-veeam-and-sonicwall/Packet Tribuneen2026-10-21T08:21:11ZSafePay Ransomware Exploits Veeam and SonicWall Flaws to Destroy Backupshttps://packettribune.com/topic/malware/pegasus-zero-click-infects-serbian-academic-days/Packet Tribuneen2026-10-21T07:42:40ZPegasus Zero-Click Infects Serbian Academic Days Before Snap Votehttps://packettribune.com/topic/vulnerabilities/tenda-ac19-web-service-suffers-critical-stack/Packet Tribuneen2026-10-21T07:16:37ZTenda AC19 Web Service Suffers Critical Stack Overflow via Firewall Config Input on Firmware 16.03.10.07https://packettribune.com/topic/vulnerabilities/php-all-installations-vulnerable-to-two-cvss-9-2/Packet Tribuneen2026-10-21T04:54:24ZPHP: All Installations Vulnerable to Two CVSS 9.2 Flaws Fixed in Oct 21 Patchhttps://packettribune.com/topic/vulnerabilities/php-rce-flaws-leak-ahead-of-october-21-patch/Packet Tribuneen2026-10-21T04:02:47ZPHP RCE flaws leak ahead of October 21 patch release for versions 5-8https://packettribune.com/topic/vulnerabilities/totolink-x2000r-crypto-signature-failure-cve-2026/Packet Tribuneen2026-10-21T03:48:48ZTotolink X2000R Crypto Signature Failure CVE-2026-10141 Risks Network Integrityhttps://packettribune.com/topic/vulnerabilities/vllm-remote-dos-via-uncontrolled-resource/Packet Tribuneen2026-10-21T02:27:26ZvLLM Remote DoS via Uncontrolled Resource Consumption in Multimodal Processinghttps://packettribune.com/topic/vulnerabilities/ibm-qradar-siem-out-of-bounds-read-vulnerability/Packet Tribuneen2026-10-20T22:28:00ZIBM QRadar SIEM Out-of-Bounds Read Vulnerability Exposes Remote Attackershttps://packettribune.com/topic/vulnerabilities/apache-tomcat-fips-mode-bypass-leaves-server-non/Packet Tribuneen2026-10-20T19:58:32ZApache Tomcat FIPS Mode Bypass Leaves Server Non-Compliant on Startup Failurehttps://packettribune.com/topic/cloud-security/google-cloud-platform-service-disruption-impacts/Packet Tribuneen2026-10-20T19:42:15ZGoogle Cloud Platform Service Disruption Impacts European Financial Institutionshttps://packettribune.com/topic/vulnerabilities/markdown-it-denial-of-service-flaw-in-smartquotes/Packet Tribuneen2026-10-20T15:22:08ZMarkdown-it Denial of Service Flaw in Smartquotes Rulehttps://packettribune.com/topic/cloud-security/data-guardian-and-offline-ai-tools-enhance-eu/Packet Tribuneen2026-10-20T12:19:07ZData Guardian and offline AI tools enhance EU sovereign cloud oversighthttps://packettribune.com/topic/vulnerabilities/advantech-adam-3600-arbitrary-file-write/Packet Tribuneen2026-10-20T10:27:41ZAdvantech ADAM-3600 Arbitrary File Write Vulnerability Requires Authenticated Access in Firmware Prior to 2.8.5.0https://packettribune.com/topic/cloud-security/easydmarc-globalsign-centralize-spf-dkim-dmarc/Packet Tribuneen2026-10-20T06:54:32ZEasyDMARC+GlobalSign: Centralize SPF/DKIM/DMARC & BIMI Verified Mark Certificates for Sender Trusthttps://packettribune.com/topic/vulnerabilities/beyondtrust-remote-support-auth-bypass-allows/Packet Tribuneen2026-10-20T03:36:21ZBeyondTrust Remote Support Auth Bypass Allows Unauthenticated File Operationshttps://packettribune.com/topic/vulnerabilities/eptura-archibus-rce-lets-attackers-steal-db/Packet Tribuneen2026-10-20T03:23:43ZEptura Archibus RCE Lets Attackers Steal DB Secrets and Run System Commandshttps://packettribune.com/topic/vulnerabilities/aiohttp-3-14-4-resolves-high-severity-connection/Packet Tribuneen2026-10-20T02:21:59Zaiohttp 3.14.4 resolves high-severity connection exhaustion vulnerability CVE-2026-111064https://packettribune.com/topic/vulnerabilities/ibm-langflow-oss-cve-2026-107366-authenticated/Packet Tribuneen2026-10-20T00:34:01ZIBM Langflow OSS CVE-2026-107366: Authenticated Users Can Hijack Sessionshttps://packettribune.com/topic/vulnerabilities/pillow-heap-leak-in-tiff-decoding-exposes-stale/Packet Tribuneen2026-10-19T23:02:48ZPillow heap leak in TIFF decoding exposes stale memory contentshttps://packettribune.com/topic/vulnerabilities/archibus-cve-2026-107187-exposes-database/Packet Tribuneen2026-10-19T18:45:26ZArchibus CVE-2026-107187 Exposes Database Credentials via Data Leak Flawhttps://packettribune.com/topic/vulnerabilities/langbot-4-11-0-missing-authenticity-check-allows/Packet Tribuneen2026-10-19T14:22:27ZLangBot 4.11.0 Missing Authenticity Check Allows Event Injectionhttps://packettribune.com/topic/vulnerabilities/apache-camel-oauth-fail-open-bug-bypasses-route/Packet Tribuneen2026-10-19T11:59:14ZApache Camel OAuth Fail-Open Bug Bypasses Route Protectionhttps://packettribune.com/topic/vulnerabilities/mobaxterm-cve-2026-112161-plugin-integrity-gap/Packet Tribuneen2026-10-19T09:01:55ZMobaXterm CVE-2026-112161: Plugin Integrity Gap Enables Local Code Execution