Progress has confirmed a critical zero-day vulnerability in ShareFile Storage Zone Controller and is releasing patches requiring immediate attention from CISOs.
Two access control flaws in RabbitMQ expose OAuth client secrets and enable reconnaissance via queue metadata; patches are available for versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.
CISA documents four actively exploited security vulnerabilities in widely used enterprise software, including a critical path-traversal flaw in Adobe ColdFusion with maximum CVSS rating.
Active exploits against a memory disclosure vulnerability in Citrix NetScaler are putting at risk companies whose network appliances lack patch protection.
Red Hat JBoss Enterprise Application Platform contains multiple exploitable vulnerabilities that enable code execution, XSS, denial of service, and security bypass.
