Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
Microsoft Fixes Record 1,413 CVEs in October Patch Tuesday
Microsoft’s October 2026 Patch Tuesday fixes 1,413 CVEs, up 45% from September, with critical flaws across Windows, Office and SharePoint...
Read moreDetails
XRP Ledger Patches Flaw That Could Have Created Unlimited XRP
An emergency fix for XRP vulnerabilities bypassed XRPL’s usual vote, drawing fire from critics while validators insist it wasn’t centralized...
Read moreDetails
Splunk Patches 22 Vulnerabilities, Including Critical Flaw With CVSS 9.8
Splunk Enterprise users should upgrade to 10.4.3, 10.2.7, 10.0.10 or 9.4.15 after Splunk disclosed 22 vulnerabilities, the worst scoring 9.8.
Read moreDetails
Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products
Atlassian rates CVE-2026-21589 Critical at 9.3. The flaw exposes files in Confluence and other Data Center tools; patches and stopgaps...
Read moreDetails
Google Suspends Open Source Bug Bounty Over AI-Generated Reports
Google froze its OSS VRP vulnerability search program on October 1, 2026, after a surge of invalid AI reports. An...
Read moreDetails
Apple Fixes CoreGraphics Flaw Used in Targeted Attacks
Apple has fixed CVE-2026-86950, an out-of-bounds write flaw in its CoreGraphics, with iOS 26.7.1 and iPadOS 26.7.1, released on September...
Read moreDetails
Citrix NetScaler Hit by Two Critical RCE Flaws Already Under Attack
Two critical NetScaler RCE flaws, CVE-2026-88771 and CVE-2026-88772, were exploited before patches existed. Citrix urges all customers to update now.
Read moreDetails
Apache Tomcat Update: 12 Security Flaws Fixed in Tomcat 11.0.26
Apache Tomcat Update to 11.0.26 fixes 12 flaws, including CVE-2026-87022 and CVE-2026-86350, across WebSocket, HTTP/2, AJP and TLS certificate checks.
Read moreDetails
Microsoft Upgrades SharePoint Flaw From Spoofing to 8.8 RCE
Microsoft first rated SharePoint CVE-2026-65660 a 6.5 spoofing issue, but the RCE flaw scores 8.8 and lets low-privileged attackers run...
Read moreDetails
Cisco ISE Vulnerability With CVSS 10.0 Score Under Active Attack
A maximum-severity flaw in Cisco Identity Services Engine, CVE-2026-76460, was exploited in the wild before Cisco released a patch.
Read moreDetailsQ1 2026 Threat Reports
