Joomla JCE CVE-2026-48907: Patch the KEV Editor Flaw
CISA added Joomla Content Editor CVE-2026-48907 to KEV. Update JCE Pro to 2.9.99.6 or later, apply the vendor patch package for older sites, and review Joomla for cleanup.
Learn MoreColumn 1
Category: General Information
Cisco SD-WAN Manager CVE-2026-20262: Patch the KEV File Write Bug
CISA added Cisco Catalyst SD-WAN Manager CVE-2026-20262 to KEV on June 15, 2026. Patch fixed software, restrict management access, and review admin activity.
Learn More
NPM 12 Install Script Changes: Hosting Build Checklist
NPM 12 changes npm install defaults in July 2026. Check CI, WordPress theme builds, native modules, Git dependencies, and approved scripts now.
Learn More
Proxmox Mail Gateway 9.1: Upgrade and Install Checklist
Upgrade Proxmox Mail Gateway 9.1 with mail flow, queue, quarantine, TLS, DNS, backup, and rollback checks.
Learn More
Windows WUSA Update Failures: Fix Network Share Installs
Microsoft now lists the WUSA network-share update issue as fixed for Windows 11 24H2/25H2 and Windows Server 2025. Here is the safe admin path.
Learn More
Velvet Ant Linux Login Backdoors: Check PAM and OpenSSH
Sygnia says Velvet Ant replaced Linux PAM and OpenSSH components in a long-running intrusion. Hosting admins should verify login-stack integrity before rotating credentials.
Learn More
Arch AUR Atomic Arch: Check Recent AUR Builds Now
Arch AUR users should review recent AUR builds after the Atomic Arch campaign hijacked orphaned packages to deliver credential-stealing malware.
Learn More
LangGraph Security Updates: Patch Self-Hosted AI Agents
Patch self-hosted LangGraph deployments for SQLite, msgpack, and Redis checkpointer flaws, then review checkpoint stores, secrets, network access, and AI workflows.
Learn More
phpBB Auth Bypass: Update Forums to 3.3.17 Now
Update phpBB forums to 3.3.17 after a critical authentication bypass report, then test login, OAuth, admin access, backups, and forum moderation workflows.
Learn More
Palo Alto CVE-2026-0274: Update Cortex XSOAR/XSIAM Integration
Update the Palo Alto Networks CommvaultSecurityIQ Marketplace integration for Cortex XSOAR and Cortex XSIAM to 1.2.0 or later for CVE-2026-0274.
Learn More