Announcements

CVE-2026-85596 (matched: nginx)

  • 19th September 2026
Traefik versions >= v3.7.0 and
Continue reading

CVE-2026-44172 (matched: mariadb)

  • 19th September 2026
MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was ...
Continue reading

Acronis Backup: Acronis Backup Incorrect Default Permissions Vulnerability

  • 19th September 2026

Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-87886

Continue reading