Security blog

Written automatically from the CVE data: a new post every 2 hours, a daily digest and a weekly roundup. Each post ranks what to patch first and shows the fix.

• 2-hour update2026-10-24
  CVE-2026-65400 Apple Macos: exploited in the wild, how to patch

  CVE-2026-65400 Apple Macos: exploited in the wild, how to patch. Vulnerability update, 24 October 2026: 3 new CVEs, 0 critical, 2 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-24
  CVE-2026-115933 Postiz signs its session, invitation: critical flaw, patch first

  CVE-2026-115933 Postiz signs its session, invitation: critical flaw, patch first. Vulnerability update, 24 October 2026: 7 new CVEs, 2 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-24
  CVE-2026-63077 Jetbrains Teamcity: exploited in ransomware attacks, patch now

  CVE-2026-63077 Jetbrains Teamcity: exploited in ransomware attacks, patch now. Vulnerability update, 24 October 2026: 16 new CVEs, 1 critical, 5 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-24
  CVE-2026-116019 Getgrav Grav: top risk today, fix steps

  CVE-2026-116019 Getgrav Grav: top risk today, fix steps. Vulnerability update, 24 October 2026: 18 new CVEs, 0 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-24
  CVE-2026-94075 Tribulant Software Newsletters newsletters-lite: critical remote flaw, how to fix

  CVE-2026-94075 Tribulant Software Newsletters newsletters-lite: critical remote flaw, how to fix. Vulnerability update, 24 October 2026: 16 new CVEs, 4 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-24
  CVE-2026-115975 Cervantessec Cervantes: top risk today, fix steps

  CVE-2026-115975 Cervantessec Cervantes: top risk today, fix steps. Vulnerability update, 24 October 2026: 20 new CVEs, 0 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-24
  CVE-2026-110447 Collabora Online – Built-in CODE: exploited in the wild, how to patch

  CVE-2026-110447 Collabora Online – Built-in CODE: exploited in the wild, how to patch. Vulnerability update, 24 October 2026: 0 new CVEs, 0 critical, 2 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-24
  CVE-2026-115929 Mongodb inc. Compass: top risk today, fix steps

  CVE-2026-115929 Mongodb inc. Compass: top risk today, fix steps. Vulnerability update, 24 October 2026: 1 new CVE, 0 critical, 0 exploited in the wild. Fix steps for each.

• Weekly roundup2026-10-24
  CVE-2026-63077 Jetbrains Teamcity: exploited in ransomware attacks, patch now | Week 43: 559 new CVEs, 16 exploited

  CVE-2026-63077 Jetbrains Teamcity: exploited in ransomware attacks, patch now. The week of 23 October 2026 to 24 October 2026 in vulnerabilities: 559 new CVEs, 45 critical, 16 exploited. Top 10 to patch and why.

• Daily digest2026-10-24
  CVE-2026-63077 Jetbrains Teamcity: exploited in ransomware attacks, patch now

  CVE-2026-63077 Jetbrains Teamcity: exploited in ransomware attacks, patch now. Vulnerability digest, 24 October 2026: 66 new CVEs, 9 critical, 9 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-18577 n-able n-central: exploited in the wild, how to patch

  CVE-2026-18577 n-able n-central: exploited in the wild, how to patch. Vulnerability update, 23 October 2026: 14 new CVEs, 3 critical, 2 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-110447 Collabora Online – Built-in CODE: exploited in the wild, how to patch

  CVE-2026-110447 Collabora Online – Built-in CODE: exploited in the wild, how to patch. Vulnerability update, 23 October 2026: 18 new CVEs, 0 critical, 2 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-42018 Jfrog Artifactory: exploited in the wild, how to patch

  CVE-2026-42018 Jfrog Artifactory: exploited in the wild, how to patch. Vulnerability update, 23 October 2026: 14 new CVEs, 1 critical, 2 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-115812 AWS multi-model-server: critical flaw, patch first

  CVE-2026-115812 AWS multi-model-server: critical flaw, patch first. Vulnerability update, 23 October 2026: 20 new CVEs, 1 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-46652 Goobi viewer: critical remote flaw, how to fix

  CVE-2026-46652 Goobi viewer: critical remote flaw, how to fix. Vulnerability update, 23 October 2026: 63 new CVEs, 6 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-112857 axiomthemes Reprizo reprizo: critical remote flaw, how to fix

  CVE-2026-112857 axiomthemes Reprizo reprizo: critical remote flaw, how to fix. Vulnerability update, 23 October 2026: 275 new CVEs, 13 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-105963 plug_crypto: top risk today, fix steps

  CVE-2026-105963 plug_crypto: top risk today, fix steps. Vulnerability update, 23 October 2026: 1 new CVE, 0 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-75779 Improper Neutralization: top risk today, fix steps

  CVE-2026-75779 Improper Neutralization: top risk today, fix steps. Vulnerability update, 23 October 2026: 24 new CVEs, 6 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-94267 Advanced Custom Fields: critical remote flaw, how to fix

  CVE-2026-94267 Advanced Custom Fields: critical remote flaw, how to fix. Vulnerability update, 23 October 2026: 20 new CVEs, 1 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-114625 VeloCloud Orchestrator (VCO) on-prem: exploited in the wild, how to patch

  CVE-2026-114625 VeloCloud Orchestrator (VCO) on-prem: exploited in the wild, how to patch. Vulnerability update, 23 October 2026: 6 new CVEs, 1 critical, 1 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-115536 gedelumbung HospitalManagement up: top risk today, fix steps

  CVE-2026-115536 gedelumbung HospitalManagement up: top risk today, fix steps. Vulnerability update, 23 October 2026: 2 new CVEs, 0 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-23
  CVE-2026-115484 iscsiuio component: top risk today, fix steps

  CVE-2026-115484 iscsiuio component: top risk today, fix steps. Vulnerability update, 23 October 2026: 5 new CVEs, 0 critical, 0 exploited in the wild. Fix steps for each.

• Daily digest2026-10-23
  CVE-2026-65400 Apple Macos: exploited in the wild, how to patch

  CVE-2026-65400 Apple Macos: exploited in the wild, how to patch. Vulnerability digest, 23 October 2026: 493 new CVEs, 36 critical, 7 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-22
  CVE-2026-110243 network management service: critical flaw, patch first

  CVE-2026-110243 network management service: critical flaw, patch first. Vulnerability update, 22 October 2026: 12 new CVEs, 3 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-22
  CVE-2026-112331 Motor.NET: top risk today, fix steps

  CVE-2026-112331 Motor.NET: top risk today, fix steps. Vulnerability update, 22 October 2026: 11 new CVEs, 0 critical, 0 exploited in the wild. Fix steps for each.

• 2-hour update2026-10-22
  CVE-2024-21762 Fortinet Fortiproxy: exploited in ransomware attacks, patch now

  CVE-2024-21762 Fortinet Fortiproxy: exploited in ransomware attacks, patch now. Vulnerability update, 22 October 2026: 49 new CVEs, 3 critical, 1 exploited in the wild. Fix steps for each.

Guides

• How to check an installed version and patch a vulnerable package (Linux, Windows, pip, npm)
• CVSS, EPSS and KEV explained: how to decide which vulnerability to patch first
• Upgrade or downgrade? What to do when a CVE has no fix yet
• Why your Linux package version does not match the advisory (backports explained)
• How to find the Windows KB update for a CVE and check it is installed