Announcements

CVE-2025-0108 (matched: php)

  • 25th September 2026
An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it ...
Continue reading

Check Point Multiple Products: Check Point Multiple Products Improper Certificate Validation Vulnerability

  • 25th September 2026
Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.Source: CISA Known Exploited Vulnerabilities Catalog — ...
Continue reading