Column 1

Category: Web Hosting Security

May 17, 2026

Patch ingress-nginx CVE-2026-4342, review Kubernetes Ingress permissions, protect Secrets, and plan migration away from retired ingress-nginx.

May 17, 2026

Patch Linux ksmbd for CVE-2026-31718 and CVE-2026-31717, verify SMB exposure, disable unused ksmbd, and reboot into fixed kernels.

May 17, 2026

Patch Citrix NetScaler ADC and Gateway for CVE-2026-3055 and CVE-2026-4368, verify SAML/Gateway/AAA exposure, and review authentication logs.

May 17, 2026

Update AI Engine to 3.5.0 or newer for CVE-2026-8719, then review MCP/OAuth connections, administrator users, content changes, and logs.

May 16, 2026

Patch Drupal SAML SSO Service Provider CVE-2026-5343 by updating to 3.1.4 or newer and reviewing SSO logs, role mapping, and admin accounts.

May 16, 2026

Patch Drupal core CVE-2026-6365 by updating supported Drupal 10 and 11 branches, rebuilding caches, and verifying editor workflows.

May 16, 2026

Patch Drupal Date iCal CVE-2026-8495 by updating to 4.0.15 or newer, rebuilding caches, and reviewing private calendar feed exposure.

May 16, 2026

Patch Traefik CVE-2026-44774 in Kubernetes Gateway deployments, review tenant route permissions, and update Traefik custom error handling.

May 16, 2026

Patch FunnelKit Funnel Builder to 3.15.0.3 or newer after active attacks placed malicious scripts on WooCommerce checkout pages.

May 15, 2026

Patch Burst Statistics CVE-2026-8181, a critical WordPress authentication bypass affecting versions 3.4.0 through 3.4.1.1.