Drupal has fixed two critical vulnerabilities that could allow attackers to remotely execute code on websites running a supported version of the content management system. The security issues affect the Field UI module of the software kernel and the contributed Entity List module. Drupal issued a warning earlier this week, urging administrators to apply updates … Read more
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud. Multiple administrator reports indicate that the attacks began in mid-September, about a month before the official event Security bulletinThe GitHub AdviceAnd CVE publication. CVE-2026-110447 affects Richdocumentscode versions before 26.4.303 and … Read more
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited to attack firewalls. The vulnerability affects the PAN-OS management interface and allows authenticated attackers with network access to execute code as root on vulnerable devices. Palo Alto Networks confirmed in a safety notice announced on … Read more