// security
$ tail -f ./security
Headlines from early disclosure channels, research labs and curated news, each with a short summary.
live updated 23 Oct, 23:18
last 24 h 73 headlines
sources 37
# Yesterday
-
CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability
A missing authentication flaw in Splunk Enterprise's Patroni REST API could let unauthenticated network users execute operating-system commands.
-
PHP2Shell Exposure Depends on More Than Whether You Use PHP
PHP2Shell exposure may affect bundled runtimes, containers, and hosted applications beyond direct PHP usage, requiring validation of exploitability.
# 21 Oct
-
Audit-Ready Isn’t Attack-Ready.
Three financial and insurance organizations used penetration testing and continuous exposure management to identify attack paths that audits may not reveal.
-
CVE-2026-109618 / CVE-2026-109619 | What is Known
Two PHP core flaws, CVE-2026-109618 and CVE-2026-109619, can allow unauthenticated remote code execution and are addressed in October 2026 security updates.