Veeam Patches Critical Unauthenticated Authorization Bypass in Backup & Replication 13 (CVE-2026-108142)

Scope: Veeam Backup & Replication 13.1.1.18 and earlier (13.1 branch), 13.0.2.29 and earlier (13.0 branch), both Windows deployments and the Veeam Software Appliance

Severity: Red

Read More

16-Year-Old EDK II UEFI Firmware Flaw Allows Code Execution Before Secure Boot on Network-Booting Servers

Scope: EDK II (TianoCore) UEFI firmware implementations supporting PXE network boot, across vendors building on the affected codebase

Severity: Amber

Read More

Attackers Already Scanning for Recently Patched Oracle E-Business Suite Flaw (CVE-2026-101767)

Scope: Oracle E-Business Suite, Application Object Library component (patched in Oracle’s October 2026 Critical Patch Update)

Severity: Red

Read More

Tailscale Officially Confirms Nearly a Dozen SSH and Networking Vulnerabilities, Patches in Progress

Scope: Tailscale SSH, serve, app connector, DERP relay client, and headscale self-hosted server

Severity: Amber

Read More

Apple Backports CoreGraphics Zero-Day Patch to Older iPhones Following Targeted Spyware Attacks

Scope: Older iPhones and iPads that did not receive last month’s CoreGraphics fix

Severity: Amber

Read More

Microsoft Pushes Out-of-Band Windows Update to Distrust Compromised eMudhra Certificate Authority Keys

Scope: Windows systems not receiving automatic certificate trust list updates

Severity: Amber

Read More