Announcements

CVE-2026-34084 (matched: php)

  • 27th July 2026
A security flaw has been found in PhpSpreadsheet, a popular library that many websites and web applications use to work with spreadsheet files like Excel, Google Sheets, and CSV files.Versions 1.30.2 and older, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3.0 through 3.10.3, and 4.0.0 through 5.5.0 of the library are affected. If your site or app ...
Continue reading

Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

  • 27th July 2026
If you use the Arista VeloCloud Orchestrator On-Prem to manage your cloud or network operations, a security vulnerability has been identified in this system. The flaw is an operating system command injection issue, which allows a remote, unauthorized person to send malicious commands to the affected system.If an attacker successfully exploits this ...
Continue reading

Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

  • 27th July 2026
A security vulnerability has been identified in Fortinet FortiOS, a network security product used to protect websites and online infrastructure. This flaw can allow an unauthorized remote user to access sensitive information that should be restricted to approved parties only.To exploit this issue, an attacker would first need to have already ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 27th July 2026
On 20 July 2026, MyCERT released a security advisory addressing new exploitation activity targeting Microsoft SharePoint, a popular tool many businesses use for file sharing, team collaboration, and managing internal workflows.The advisory recommends "hardening" (the process of tightening security settings and configurations) for SharePoint ...
Continue reading