Patch CVE-2026-110720 now. This 9.9 CVSS consul-k8s vulnerability enables a cross-namespace authorization bypass in ACL binding rules.

Related Posts:

• Apple iOS 27.2 Update Fixes 160 Security Flaws
• CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface
• Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones

The post HashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720) appeared first on Daily CyberSecurity.

Six Apache DolphinScheduler vulnerabilities, including CVE-2026-71896 and Kubernetes credential leak CVE-2026-71895, are fixed in 3.4.3.

Related Posts:

• wolfSSH 1.6.0 Fixes Five Flaws, Including Critical Host Key Bypass CVE-2026-16516
• Cisco Finesse SSRF Flaw CVE-2026-20362 Publicly Disclosed, With Fixes Not Due Until 2027
• VMware Workstation and Fusion VMXNET3 Flaw CVE-2026-59346 Detailed With Public PoC Exploit

The post Apache DolphinScheduler 3.4.3 Fixes Six Authorization Flaws That Leak Passwords and Kubernetes Credentials appeared first on Daily CyberSecurity.

Octopus Deploy addressed critical Octopus Server vulnerabilities involving a CVSS 8.7 remote code execution. Apply the security patches to prevent attacks.

Related Posts:

• Apache NiFi Vulnerabilities Expose Data Pipelines to Attacks
• Unbound DNS Vulnerabilities Expose Resolvers to RCE
• CVE-2026-89775 (CVSS 9.3): Linux Kernel LPE to Gain Root Flaw in KVM

The post Authorization Bypass (CVSS 8.7): Critical Octopus Server Vulnerabilities Patched appeared first on Daily CyberSecurity.