Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain Source: The Hacker News SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall’s William Perry and Adam Babis, are listed below - CVE- Read original
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain Source: The Hacker News SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall’s William Perry and Adam Babis, are listed below - CVE- Read original
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server Source: The Hacker News cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel &am Read original
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server Source: The Hacker News cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel &am Read original
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server Source: The Hacker News cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel &am Read original
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server Source: The Hacker News cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel &am Read original
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server Source: The Hacker News cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel &am Read original
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server Source: The Hacker News cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel &am Read original
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server Source: The Hacker News cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel &am Read original
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE Source: The Hacker News Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting s Read original