Tools & Apps 10/23/2026 3 min@ZachasADMINCollabora Built-in CODE Server flaw is exploited; CISA sets Oct 26 patch deadlineCISA added CVE-2026-110447 to its exploited-vulnerabilities catalog: an unauthenticated OS command injection in the Collabora Online Built-in CODE Server app that lets attackers run commands on Nextcloud servers while the CODE server is stopped. Fixed in 26.4.303.Read more
Tools & Apps 9/29/2026 3 min@ZachasADMINCISA lists exploited Apple CoreGraphics flaw; iOS and macOS fixes availableCISA added CVE-2026-86950 to its exploited-vulnerability catalog. Apple has released fixes for supported iOS, iPadOS, and macOS versions and describes reports of highly targeted attacks.Read more
Tools & Apps 9/26/2026 3 min@ZachasADMINCISA adds SharePoint code-injection CVE with a September 28 deadlineCISA added CVE-2026-65660 in Microsoft SharePoint to its Known Exploited Vulnerabilities catalog on September 25, giving covered federal agencies until September 28 to apply vendor guidance.Read more
Tools & Apps 9/25/2026 3 min@ZachasADMINCVE-2026-87902 enters CISA KEV with WordPress patch deadlineCISA added WordPress Core CVE-2026-87902 to its KEV catalog on September 25, with a September 28 remediation deadline for covered federal agencies.Read more
Tools & Apps 9/25/2026 3 min@ZachasADMINSupabase rolls out PostgreSQL 15.19 and 17.11 with 44 CVE fixesSupabase is rolling out PostgreSQL 15.19 and 17.11 after five upstream security cycles. Existing projects should prepare for the September 28 upgrade window and check whether indexes or legacy PGP data need action.Read more
Tools & Apps 9/25/2026 4 min@ZachasADMINCloudflare fixed a cross-tenant disk exposure in ContainersCloudflare says a storage-allocation flaw in Containers and Sandboxes could expose residual disk blocks from other tenants; the fleet-wide fix and cache cleanup are complete, with no evidence of malicious exploitation.Read more