VMware vCenter CVE-2026-59310: Patch VMSA-2026-0006 Now
CISA added VMware vCenter CVE-2026-59310 to KEV. Apply Broadcom VMSA-2026-0006 updates and verify the management plane safely.
Learn MoreColumn 1
Tag: Security Update
Forminator CVE-2026-15748: Update WordPress Forms to 1.56.2
Forminator sites should update to version 1.56.2 or later for the critical CVE-2026-15748 security fix.
Learn More
WPAdverts CVE-2026-11801: Update the Classifieds Plugin to 2.3.3
WPAdverts sites should update the Classifieds Plugin to 2.3.3 or later for the CVE-2026-11801 security fix.
Learn More
GitLab Critical Patch: Update CE/EE for CVE-2026-19478
GitLab released critical fixes for self-managed CE/EE. Update to 19.2.4, 19.1.6, 19.0.8, or 18.11.11 now.
Learn More
Ray CVE-2025-62593 CISA KEV: Update to Ray 2.52.0 or Later
CISA added Ray CVE-2025-62593 to KEV. Update Ray to 2.52.0 or later and restrict exposed workload and management surfaces.
Learn More
Metabase CISA KEV Alert: Patch CVE-2026-72898 Now
CISA added Metabase CVE-2026-72898 to KEV after the vendor confirmed active attacks. Self-hosted administrators should move to a fixed release, validate access, and review sensitive connections.
Learn More
N-able N-central CISA KEV: Patch CVE-2026-18556 and CVE-2026-18577
CISA lists two actively exploited N-central authentication-bypass issues. Apply N-able 2026.3 Hotfix 1, validate the control plane, then stage agent work.
Learn More
PHP May 2026 Security Releases: Hosting Update Checklist
PHP 8.5.6, 8.4.21, 8.3.31, and 8.2.31 are security releases. Use this hosting checklist for cPanel, Plesk, WordPress, WooCommerce, and PHP-FPM updates.
Learn More
LiteSpeed cPanel Plugin CVE-2026-54420: cPanel Patch Guide
CISA added LiteSpeed cPanel Plugin CVE-2026-54420 to KEV. Hosting admins should confirm cPanel user-end plugin 2.4.8 and LiteSpeed WHM Plugin 5.3.2.1 or newer.
Learn More