A memory-corruption flaw in Google’s Brotli decoder has been identified, impacting Node.js, Bun, and Python packages. The vulnerability could lead to remote code execution through maliciously crafted compressed data.
Microsoft has resolved a Windows 11 bug causing black screens, desktop loading issues, and Explorer crashes in virtual desktop environments.
Cisco has patched an actively exploited zero-day vulnerability in its Secure Email Gateway that allows remote unauthenticated attackers to execute commands with root privileges.
SAP has released its October 2026 security updates, patching 20 vulnerabilities across multiple products. Among them is a maximum-severity OAuth2 Server-Side Request Forgery (SSRF) flaw in the Cloud SDK for Python, tracked as CVE-2026-89111, that
Atlassian has released urgent patches for a critical flaw (CVE-2026-21589) affecting eight Data Center products, including Jira and Confluence, after reports of active exploitation in the wild emerged.
