Overview
- Apache Software Foundation
- Apache HTTP Server
Description
Statistics
- 21 Posts
- 29 Interactions
Fediverse
A critical vulnerability in the #Apache webserver has been disclosed, which affects #NextcloudPi.
The good news is that a patched version is already available for your system.
You may want to run `sudo apt-get update && sudo apt-get upgrade` to get it faster.
YOU WON'T GET THE FIX IF YOU'RE STILL ON BOOKWORM.
We recently pushed an update for Apache's (httpd) mod2_http to our (optional) security repo, patching this upstream CVE: https://access.redhat.com/security/cve/cve-2026-119618
For more info on our security repo, see: https://rockylinux.org/news/2026-05-14-introducing-security-repository
I thought the Cybersecurity Awareness Month is over? But on and on and on it goes: https://www.wordfence.com/blog/2026/11/cve-2026-119618-apache-http2/
Only affects apache web servers where HTTP2 is enabled, but then it could be potentially serious. Debian has already new packages out, and upgrade is as easy as `apt upgrade` (or to be very specific and leave the rest of the system untouched `apt install --only-upgrade apache2`).
So go upgrade now!
Anyway I can't be too smug about Microsoft; I got an email from #NCSC last night about unpatched CVE-2026-119618 in the upstream #Apache container for my self-hosted #Nextcloud and had to take it offline for a couple of hours while I figured out rebuilding dependent #PHP containers....
Und während wir uns gerade von den Sicherheitslücken der letzten Tage erholen:
"Anthropic's OSS Scanner"
https://www.cve.org/CVERecord?id=CVE-2026-119618
🚨 Critical Apache HTTP Server flaw discovered by Anthropic and Google could allow hackers to execute code without authentication; CVE-2026-119618
The Apache Software Foundation has released an urgent security update addressing a critical remote code execution vulnerability in Apache HTTP Server's HTTP/2 module.
The flaw, tracked as CVE-2026-119618, involves a race condition that could allow unauthenticated attackers to corrupt server memory and potentially execute malicious code on vulnerable systems.
The vulnerability was independently discovered by Anthropic's AI-powered OSS Scanner and researchers at Google Cloud.
Apache HTTP Server versions 2.4.55 through 2.4.70 are affected, with version 2.4.71 released to address the issue.
Source: https://httpd.apache.org/security/vulnerabilities_24
No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Need API access? darkwebinformer.com/api-details
Check out the Telegram channel: t.me/SliceForLifeee
Karen IT Security Response Center (@ksrc) Advisory
Advisory ID: KSRC-2026-11121
A #critical race-condition #vulnerability has been identified in the #mod_http2 module of the #Apache HTTP Server. Tracked as CVE-2026-119618, the flaw allows an unauthenticated #remote attacker to trigger heap corruption and achieve remote code execution on servers that have HTTP/2 enabled.
The vulnerability has been assigned a CVSS v3.1 score of 9.8 (Critical). Apache HTTP Server versions 2.4.55 through 2.4.70 are affected. The issue was fixed in version 2.4.71, released on 11 November 2026. Public proof-of-concept material is available.
PSA: Critical Apache HTTP/2 Vulnerability: What WordPress Site Owners Should Know
If your WordPress site is hosted on Apache, ask your host whether its Apache server accepts HTTP/2 and whether the fix has been installed.
https://www.wordfence.com/blog/2026/11/cve-2026-119618-apache-http2/
Too tired to hunt for the config detail that decides if #Apache CVE-2026-119618 needs emergency patching? Our new free scanner checks both conditions that make the RCE risk real:
→ the server runs Apache 2.4.55–2.4.70
→ and HTTP/2 is on
The scan gives you evidence for both: h2c request, server reply, version, port. No crash trigger, no login, no email required.
Check your Apache server: https://pentest-tools.com/network-vulnerability-scanning/cve-2026-119618-scanner-apache-http2-rce
Share it with a fellow sysadmin who needs way too much coffee to get through the day.
POV: anthropic and google both found the same apache bug before you patched it
CVE-2026-119618, a race condition in HTTP/2 headers
affected: 2.4.55 to 2.4.70
fix: 2.4.71
no public exploit yet, per wiz
can't patch today? turn off HTTP/2:
Protocols http/1.1
https://www.wiz.io/blog/cve-2026-119618-rce-apache-http-server-vulnerability
“A critical vulnerability in the HTTP/2 module of Apache HTTP Server could be exploited by an unauthenticated attacker to obtain remote code execution (RCE).
The Apache Software Foundation has fixed the issue, now tracked as CVE-2026-119618, but a significant number of servers are vulnerable and reachable over the public internet.”
N-central Attacks Continue, Plus 4 Tech Stories https://raymondtec.com/2026/11/n-central-attacks-continue-plus-4-tech-stories/?utm_source=mastodon&utm_medium=social&utm_campaign=daily_brief
Attackers compromised N-central servers already running Hotfix 2. Plus an Apache HTTP/2 flaw, GitHub Actions credential theft, a Windows update failure, and a LinkedIn privacy ruling.
#TechNews #ApacheHTTPServer #CVE2026119618 #FourthCircuit #GitHub #GitHubActions #LinkedIn
Bluesky
Overview
- checkpoint
- Quantum Security Gateway
Description
Statistics
- 9 Posts
- 5 Interactions
Fediverse
Check Point exploited zero-day: CVE-2026-123039 (7.8 high) local privilege escalation to root
Check Point observed an active exploit of this vulnerability against a couple of dozen customers.
Check Point Gateway vulnerability CVE-2026-123039 exploited with PHP2Shell to gain root, plant backdoors and wipe ESXi. Patch to R82.20 Take 14.
#CheckPoint #PHP2Shell #ExploitedInTheWild #PrivilegeEscalation #Wiper #CyberSecurity #InfoSec
Check Point Gateway: Sicherheitslücke CVE-2026-123039 wird aktiv ausgenutzt
Angreifer haben eine Schwachstelle im Gaia-Betriebssystem von Check Point bei einigen Dutzend Kunden ausgenutzt. Sie kombinierten sie mit Lücken im Mobile-Access-Portal, um Root-Rechte zu erlangen. Check Point stellt Jumbo-Hotfixes bereit, ab R82.20 Take 14 ist die Lücke geschlossen.
#checkpoint #patch #sicherheitslucken #schwachstellen #cybersecurity
Unknown actors targeted unpatched Check Point Security Gateways from Oct.
30, 2026.
The first wave targeted Israeli organizations; a broader wave on Nov.
2 targeted multiple countries and sectors.
Initial access used PHP2Shell vulnerabilities, followed by privilege escalation via CVE-2026-123039.
The activity involved the persistent TSGA backdoor and its TSProxy networking component, as well as a Linux wiper that recursive…
Check Point Gateway Hack: PHP2Shell, CVE-2026-123039 and the TSGA Backdoor
Check Point gateways were hit by PHP2Shell and CVE-2026-123039 root escalation, then TSGA backdoor and ESXi wipers. Get the IOCs, hotfixes and hunting stepshttps://thecybersecguru.com/news/check-point-cve-2026-123039-php2shell-tsga/
Bluesky
Overview
Description
Statistics
- 9 Posts
- 15 Interactions
Fediverse
> * New upstream version 18.7.
> * The fix for CVE-2026-6460 requires recompilation of (almost) all server
> extension packages.
Next to the PostgreSQL updates that were just announced, we also
recompiled all extensions against the new server versions. I didn't
send out update emails for each of them since 100 more emails don't
make the problem better.
Overall, 51519 packages were updated over the last days. (Not
including the PG and LLVM snapshots that get built all the
time anyway.)
https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/
PostgreSQL security update 18.7 fixes 52 CVEs, including CVE-2026-6460 and 31 other code execution flaws. PostgreSQL 14 reaches end of life.
#PostgreSQL #Postgres #DatabaseSecurity #CVE #PatchNow #RCE #CyberSecurity #InfoSec
Bluesky
Overview
- Citrix NetScaler
- Console
Description
Statistics
- 5 Posts
- 20 Interactions
Fediverse
Are you deadass Citrix, I can't even right now:
28 CVEs in NetScaler, 9 are critical, 4 are medium (6.9s) but the other 15 are high severity. No mention of exploitation.
EDIT: another advisory, h/t @mtaggart https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697320&articleURL=Citrix_NetScaler_Console_Security_Bulletin_for_CVE_2026_120869
Citrix announced security updates on 12 November 2026 for 12 issues across NetScaler ADC, NetScaler Gateway, NetScaler Console and Secure Access Client for Windows and Linux.
Nine issues in ADC and Gateway could cause unexpected behavior or denial of service.
CVE-2026-120869 could let an unauthenticated attacker bypass checks and access restricted NetScaler Console resources; it is fixed in version 14.1-74.34 an…
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
Citrix has patched 12 flaws across NetScaler ADC, NetScaler Gateway, NetScaler Console and the Secure Access Client, including nine critical memory-overflow issues in NetScaler, scored as high as 9.5, that can cause denial of service, and a critical improper-authentication flaw in NetScaler Console (CVE-2026-120869, CVSS 9.4) that lets an unauthenticated attacker bypass authentication. Citrix says the issues were found through AI-assisted code review and that it is not aware of any exploitation. https://thehackernews.com/2026/11/citrix-patches-12-netscaler-and-secure.html
thats a funny one.. imagine using products built by security companies
🔐 CVE-2026-120869
📊 CVSS: 9.3 · Critical
📅 11/12/2026, 03:17 PM
📦 Affected: Citrix NetScaler Console (< 14.1-74.34)
📚 https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697320 https://nvd.nist.gov/vuln/detail/CVE-2026-120869
Citrix NetScaler vulnerabilities fixed: CVE-2026-120868 hits default setups, CVE-2026-120869 bypasses Console login. Upgrade to 14.1-73.57 now.
#Citrix #NetScaler #CVE #Vulnerability #PatchNow #DoS #PrivilegeEscalation #CyberSecurity #InfoSec
Overview
Description
Statistics
- 5 Posts
- 5 Interactions
Fediverse
Global Microsoft services, including Outlook and Teams, experienced outages, coinciding with active exploitation of an Outlook vulnerability (CVE-2026-124194). Critical patches are also urged for exploited GPUStack AI cluster flaws. Geopolitically, US diplomats met with Ukraine and Russia to discuss peace, achieving an agreement on a prisoner exchange but no major breakthrough on lasting peace. In tech news, NVIDIA CEO Jensen Huang resigned, with Colette Kress appointed interim CEO. Additionally, AI-assisted research identified 66 new flaws in critical infrastructure TCP/IP stacks. (Nov 12-13, 2026)
Wait... #Microsoft confirmed active exploitation of a new Outlook zero day. The CVE record was updated yesterday. And a bit later the light goes out for #Microsoft365 apps.
I'm no #infoSec expert, but it seems quite a coincidence. Faulty update maybe?
(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-124194 – Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Executive risk and governance perspective on CVE-2026-124194, providing leadership with actionable compliance strategies, asset integrity audits, and boardroom oversight metrics....
Overview
- Citrix NetScaler
- ADC
Description
Statistics
- 4 Posts
- 4 Interactions
Fediverse
CVE-2026-120868 is a CRITICAL memory overflow in Citrix NetScaler ADC/Gateway (CVSS 9.3). Exploitation leads to denial of service or erratic behavior. Patch to 14.1-73.58/13.1-64.39 now. Details: https://radar.offseq.com/threat/cve-2026-120868-memory-overflow-in-packet-processing-can-lead-to-unpredictable-or-erroneous-behavior-c23ec696d999cbc7 #OffSeq #Citrix #Vuln #PatchNow
Citrix NetScaler vulnerabilities fixed: CVE-2026-120868 hits default setups, CVE-2026-120869 bypasses Console login. Upgrade to 14.1-73.57 now.
#Citrix #NetScaler #CVE #Vulnerability #PatchNow #DoS #PrivilegeEscalation #CyberSecurity #InfoSec
Bluesky
Overview
Description
Statistics
- 3 Posts
- 2 Interactions
Fediverse
https://fritz.com/nl-nl/pages/current-security-topics-4
Fritz!Box / Fritz!OS:
«
Vulnerability in the handling of incoming IPv4 TCP connections in the Linux kernel (CVE-2026-98432): Updates in preparation
… We are not currently aware of any successful exploitation of the vulnerability, either in the context of our products or on other Linux-based systems. As a precaution, we are preparing updates for affected devices, which we will release as usual once they are ready.»
Bluesky
Overview
- MongoDB
- MongoDB Server
Description
Statistics
- 3 Posts
- 1 Interaction
Fediverse
🚨 Critical MongoDB flaw allows unauthenticated attackers to crash database servers, with potential for remote code execution; CVE-2026-118383
MongoDB has released emergency security updates addressing a critical use-after-free vulnerability (CVSS 9.5) that could allow attackers to crash database servers without authentication and potentially execute malicious code under specific conditions.
Researchers at Datadog Security Labs demonstrated how just two specially crafted requests could trigger a crash during a replica set failover, potentially disrupting database availability. Standalone MongoDB instances are not affected.
The vulnerability affects multiple MongoDB Server versions, including 4.4 through 9.0. Patches are available, and administrators are urged to update affected replica set members immediately.
MongoDB says it has found no evidence of exploitation in the wild.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Need API access? darkwebinformer.com/api-details
Check out the Telegram channel: t.me/SliceForLifeee
CVE-2026-118383: The Pre-Auth MongoDB Use-After-Free That Crashes a New Primary During Failover
CVE-2026-118383 (CVSS 9.5) lets an unauthenticated client crash a new MongoDB primary during failover. Affected versions, root cause, detection, patchinghttps://thecybersecguru.com/news/mongodb-cve-2026-118383-use-after-free/
Overview
- Red Hat
- Red Hat Satellite 6.16 for RHEL 8
- rubygem-safemode
Description
Statistics
- 2 Posts
- 6 Interactions
Fediverse
safemode
https://nvd.nist.gov/vuln/detail/cve-2026-107360
A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation, including destructive operations such as host deletion and disclosure of non-allow-listed object state.
Red Hat Satellite vulnerabilities fixed: CVE-2026-107360 (CVSS 9.6) sandbox bypass leads 21 new Red Hat CVEs across Satellite, RHEL and Ansible.
#RedHat #Satellite #Foreman #RHEL #Ansible #Vulnerability #CyberSecurity #InfoSec
Overview
Description
Statistics
- 2 Posts
- 2 Interactions
Fediverse
New tutorial: your first MLOX project in five minutes 🦥
Install MLOX, create an encrypted project, spin up a local Ubuntu VM with Docker and run your first app on it, all from the terminal UI.
Secure by default: when MLOX sets up a server, it turns off SSH password and keyboard-interactive logins and connects with its own key. That's the recommended mitigation for password bypasses like last week's sshole (CVE-2026-123158).