SUSE fixed Rancher security vulnerabilities, including Rancher credential leak CVE-2026-88811, an SSRF flaw, and an unauthorized shell bypass. Update now.

Related Posts:

• Ubuntu Kernel Fixes for CVE-2026-98432 (CVSS 9.8) Land in Proposed Pocket
• cPGuard Supply Chain Attack Pushes Backdoor Through Update Channel
• TeamViewer Client Vulnerability Enables Remote Code Execution

The post Rancher Security Vulnerabilities Expose Cloud Credentials appeared first on Daily CyberSecurity.

A critical LiteLLM vulnerability (CVSS 10.0) lets an unauthenticated file read leak the master key on Enterprise proxies. Update to 1.106.5 now.

Related Posts:

• Intelbras Camera Vulnerability Lets Attackers Knock Mibo Cameras Offline
• Body-Parser Flaw CVE-2026-111181 Lets One Request Crash Express Servers, PoC Public
• Adobe Patches Nine Critical Vulnerabilities in Campaign Classic and Connect

The post Unauthenticated File Read Leaks Master Key in LiteLLM Enterprise Proxy, CVSS 10.0 appeared first on Daily CyberSecurity.

Apache Camel fixes eight Apache Camel vulnerabilities, including XXE flaw CVE-2026-90885 and S3 injection CVE-2026-95664. Upgrade to 4.23.0.

Related Posts:

• Electrum Wallet Vulnerability Exploits RBF Fee Bumps
• Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code
• Microsoft Ships Out-of-Band .NET Updates for Brotli Overflow and Linux Tarball Flaws

The post Apache Camel Fixes Eight Flaws, Including High-Severity XXE in camel-saxon appeared first on Daily CyberSecurity.

A Roundcube security update fixes 20 flaws, including IMAP command injection and header injection. Upgrade to 1.6.20 or 1.7.5 now.

Related Posts:

• PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras
• Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape

The post Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection appeared first on Daily CyberSecurity.

Attackers target a critical SonicWall SMA1000 vulnerability in the wild. Apply vendor hotfixes to secure remote access gateways against CVE-2026-102255.

Related Posts:

• JetBrains Software Vulnerabilities Impact TeamCity
• Nginx UI RCE Vulnerability Disclosed With PoC Exploit Code
• Critical Apache Camel Karavan Vulnerabilities Threaten Servers

The post SonicWall SMA1000 Vulnerability Exploited in the Wild appeared first on Daily CyberSecurity.

A Cisco Finesse vulnerability, SSRF flaw CVE-2026-20362, has been publicly disclosed. Fixes arrive in early 2027, with no workarounds.

Related Posts:

• Apache DolphinScheduler 3.4.3 Fixes Six Authorization Flaws That Leak Passwords and Kubernetes Credentials
• wolfSSH 1.6.0 Fixes Five Flaws, Including Critical Host Key Bypass CVE-2026-16516
• VMware Workstation and Fusion VMXNET3 Flaw CVE-2026-59346 Detailed With Public PoC Exploit

The post Cisco Finesse SSRF Flaw CVE-2026-20362 Publicly Disclosed, With Fixes Not Due Until 2027 appeared first on Daily CyberSecurity.

SonicWall SMA1000 vulnerability CVE-2026-102255 (CVSS 10) allows pre-auth SSRF. Three more flaws fixed. Upgrade to 12.5.0-03082 now.

Related Posts:

• CVE-2026-21589 Exploited in the Wild as Atlassian File Read Flaw Details and PoC Go Public
• Elastic Patches 14 Flaws in Elasticsearch, Kibana and Elastic Defend
• ASUS Patches Four Router Firmware Flaws, Including Two Critical Bugs Rated CVSS 9.3

The post SonicWall Patches CVSS 10 Pre-Auth SSRF Flaw and Three More Bugs in SMA1000 Appliances appeared first on Daily CyberSecurity.

Kiteworks vulnerabilities fixed in 9.5.1 include CVE-2026-102115, a 9.8 password reset flaw that enables admin account takeover. Patch now.

Related Posts:

• PoC Exploit Released for Next.js RCE Flaw CVE-2026-94545
• ASUS Security Vulnerabilities Expose Routers and Motherboards
• MediaWiki External Data CVE-2026-100382 (CVSS 10) Unauthenticated RCE Exploited in the Wild, PoC Public

The post Kiteworks Patches 78 Vulnerabilities, Including Critical Account Takeover Flaw appeared first on Daily CyberSecurity.