Announcements

CVE-2026-34084 (matched: php)

  • 25th July 2026
PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3.0 through 3.10.3, and 4.0.0 through 5.5.0, when the filename argument to IOFactory::load() is user-controlled, an attacker can supply a PHP stream wrapper path (such as phar://, ftp://, or ...
Continue reading

Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

  • 25th July 2026
There is a known security vulnerability affecting Microsoft SharePoint, a platform many businesses use for document storage, team collaboration, and internal workflow management on their hosted services. The flaw exists in how SharePoint processes untrusted, unvetted data sent to the system, which can be manipulated by malicious actors. If this ...
Continue reading

Check Point SmartConsole: Check Point SmartConsole Improper Authentication Vulnerability

  • 25th July 2026
A security flaw has been found in Check Point SmartConsole, a tool some businesses use to manage their network security settings and policies. This is an improper authentication vulnerability, meaning the tool’s built-in checks to confirm only approved users can log in are not working correctly.Because of this issue, an unauthorized person ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 25th July 2026
On July 20, 2026, cybersecurity agency MyCERT released a security advisory recommending hardening measures for Microsoft SharePoint, following reports of new active exploitation attempts targeting the platform. Microsoft SharePoint is a widely used tool that organizations rely on to host shared documents, team collaboration spaces, and related web ...
Continue reading