MediumVulnerabilityMonitoringPatch available
The Roundcube team released Webmail security updates 1.
6 results
The Roundcube team released Webmail security updates 1.
A researcher known as forcequit published worse_query, an iOS sandbox-escape proof of concept, on GitHub on November 8; it lets an app read other apps' data containers on iOS 26 and 27 .
Researchers Shubham Shah and Sam Curry disclosed on Nov 7 that in early 2026 they found a vulnerability chain giving them remote code execution on production ForgeRock servers handling customer logins for two unnamed automakers, letting them create a valid session for any customer account and locate, unlock and remotely start connected vehicles .
Openwave Messaging says Webtop Media Transcoder before 1.
According to iThome, on the evening of August 20, Addcn Technology (5287) issued a cybersecurity material announcement on the Market Observation Post System (MOPS) disclosing an abnormal website access incident .
According to Security NEXT, MongoDB's zlib implementation contains vulnerability CVE-2025-14847, which may allow external actors to read uninitialized server heap memory .