Vulnerability (CVE)
A flaw in WordPress core tracked as CVE-2026-93485 and named Comment2Shell let an anonymous visitor plant a hidden script in a comment that ran when a logged-in administrator opened the page, and WordPress fixed it on September 17 in version 7.1.1....
A placeholder domain that appeared in roughly 1,700 repositories was registered by someone and used to serve malicious lures. Citrix released patches for CVE-2026-88771, an improper input validation flaw allowing unauthenticated arbitrary command...
Citrix released security updates for a high-severity memory overflow vulnerability in NetScaler ADC and NetScaler Gateway, tracked as CVE-2026-88779 with a CVSS score of 8.7 out of 10.0, which has been exploited in targeted zero-day attacks and requires...