MediumVulnerabilityMonitoringPatch available
The Roundcube team released Webmail security updates 1.
10 results
The Roundcube team released Webmail security updates 1.
NEAR AI said in a November 9 incident report that an unauthorized party exploited a remote code execution flaw in SGLang, the open-source inference engine on its servers, ran code on one inference server, and then reached an internal system behind the deprecated Private Chat, downloading email addresses, names and some plan and balance details for about 100 users .
Ethersphere maintainers said on GitHub that Swarm Desktop 0.
QiAnXin XLab says it captured a suspicious script, cwpsrv_update.
In FreeSWITCH 1.
LiteLLM said its release pipeline was compromised early on October 21 and pushed v1.
On October 22, the Administration for Cyber Security (ACS), MODA urged public and private sectors to accelerate patching: Node.
On October 21, PHP released security updates patching CVE-2026-109618 and CVE-2026-109619, two vulnerabilities with CVSS v4.
Cisco disclosed on August 19, 2026 that the Open Client Interface (OCI) XML parser in BroadWorks resolves external entities by default, letting an unauthenticated remote attacker send crafted XML to the OCI-P service and read sensitive files with the privileges of the BroadWorks user .
GPUStack before 2.