Vulnerabilities
Stay informed with the latest Vulnerabilities news on The Cyber Express, a trusted source for cybersecurity and information technology updates. Our publication covers the most recent developments, trends, and expert insights into security vulnerabilities affecting various industries. Whether you're a cybersecurity professional or simply interested in staying ahead of emerging threats, we provide comprehensive coverage of Vulnerabilities news. Explore detailed reports, expert opinions, and the most critical updates on Vulnerabilities news to safeguard your business and personal information from potential risks in today’s digital landscape. Stay updated with The Cyber Express.
SAP Patches Critical CVSS 10.0 Flaw in Cloud SDK for Python
SAP released 22 new and updated security notes on October 13, 2026, patching four critical bugs, including a CVSS 10...
Read moreDetails
Microsoft Fixes Record 1,413 CVEs in October Patch Tuesday
Microsoft’s October 2026 Patch Tuesday fixes 1,413 CVEs, up 45% from September, with critical flaws across Windows, Office and SharePoint...
Read moreDetails
XRP Ledger Patches Flaw That Could Have Created Unlimited XRP
An emergency fix for XRP vulnerabilities bypassed XRPL’s usual vote, drawing fire from critics while validators insist it wasn’t centralized...
Read moreDetails
Splunk Patches 22 Vulnerabilities, Including Critical Flaw With CVSS 9.8
Splunk Enterprise users should upgrade to 10.4.3, 10.2.7, 10.0.10 or 9.4.15 after Splunk disclosed 22 vulnerabilities, the worst scoring 9.8.
Read moreDetails
FBI Takes Down China-Linked Tools That Scanned US Utilities
The advisory is intended to help network defenders identify and respond to the group's malicious activity.
Read moreDetails
Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products
Atlassian rates CVE-2026-21589 Critical at 9.3. The flaw exposes files in Confluence and other Data Center tools; patches and stopgaps...
Read moreDetails
86,644 Firewalls in 194 Countries Breached With Stolen Passwords
The operation's internal workflow came to light after the threat actors unintentionally exposed their own backend server.
Read moreDetails
Google Suspends Open Source Bug Bounty Over AI-Generated Reports
Google froze its OSS VRP vulnerability search program on October 1, 2026, after a surge of invalid AI reports. An...
Read moreDetails
The Cyber Express Weekly Roundup: Renfe Confirms Breach, Australia Warns of Hijacked AI Keys, and Europol Sounds the Alarm on AI-Driven Crime
In this weekly roundup: Renfe's data breach, Australia's hijacked AI key warning, Polish patient data theft, MSP360 phishing, and Europol's...
Read moreDetails
OpenSSL Flaw Could Expose Heap Memory and Crash Applications
A flaw in OpenSSL's DTLS retransmission logic, tracked as CVE-2026-84782, may expose heap memory to remote peers. Patches cover versions...
Read moreDetailsQ1 2026 Threat Reports
