#Patch
All CosmicBytez Labs articles tagged #Patch, across news, security advisories, how-to guides, and projects.
- News
Kiteworks Patches Critical Flaw, Brings Customer Systems Online
Kiteworks restored customer systems after a nine-hour precautionary shutdown tied to threat intel, finding and patching a critical Advanced Forms flaw.
- News
Microsoft Fixes Bug That Broke Windows File History Backup Feature
Microsoft fixed the File History backup bug from September 2026 updates via optional KB5124006/KB5124010 for Windows 11; Windows 10 fix still pending.
- News
N-able Patches Max-Severity N-central RCE Amid Live Attacks
N-able rushed out N-central Hotfix 4 for CVE-2026-86218, a 10.0 pre-auth RCE, after Huntress flagged signs of related exploitation.
- Security
CVE-2026-63700: Dell Wyse Management Suite Privilege Escalation
Dell patches a high-severity privilege escalation flaw in Wyse Management Suite allowing local attackers to achieve full system compromise.
- News
Check Point Patches SmartConsole Zero-Day Exploited in Attacks
Check Point Software has patched an actively exploited zero-day vulnerability in its SmartConsole GUI admin panel. The flaw allowed attackers to...
- News
Microsoft Reins in RoguePlanet Zero-Day After Public PoC Release
Researcher 'Nightmare-Eclipse' published a proof-of-concept exploit for a Windows Defender vulnerability in early June after dropping several other...
- News
Zimbra Urges Customers to Patch Critical Web Client XSS Flaw Exploited in the Wild
CVE-2025-27915, a stored XSS vulnerability in Zimbra's Classic Web Client, was exploited as a zero-day before public disclosure. Attackers used malicious...
- News
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
A heap over-read vulnerability introduced in a 1997 FTP parser change allows a malicious co-user of a shared Squid proxy to read other users' cleartext...
- News
Microsoft Working on Defender Patch for RoguePlanet Zero-Day
Microsoft has confirmed it is developing a security patch for the RoguePlanet zero-day vulnerability in Windows Defender, disclosed publicly last week,...
- News
Chrome 148 Update Patches 151 Vulnerabilities Including Critical RCE Flaws
Google has released Chrome 148 with patches for 151 security vulnerabilities, including critical-severity flaws that could allow remote code execution....
- News
Ubiquiti Patches Three Max-Severity UniFi OS Vulnerabilities
Ubiquiti has released security updates fixing three CVSS 10.0 vulnerabilities in UniFi OS that allow unauthenticated remote attackers to fully compromise...
- News
Adobe Patches Actively Exploited Zero-Day That Lingered for Months
Adobe has patched an actively exploited zero-day in Acrobat and Reader that threat actors have been weaponizing via malicious PDF files since at least...
- News
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
Fortinet has released emergency out-of-band patches for CVE-2026-35616, a critical pre-authentication API access bypass in FortiClient EMS that enables...
- News
New FortiClient EMS Flaw Exploited in Attacks, Emergency
Fortinet has released an emergency weekend security update for CVE-2026-35616, a critical pre-authentication API access bypass in FortiClient EMS that is...
- News
Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks
F5 has reclassified a BIG-IP APM vulnerability from denial-of-service to critical remote code execution, warning that attackers are actively exploiting...
- News
Oracle Pushes Emergency Fix for Critical Identity Manager
Oracle has released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability in Oracle Identity Manager and...
- Security
CVE-2026-3589: WooCommerce CSRF Flaw Allows Unauthenticated
A cross-site request forgery vulnerability in WooCommerce versions 5.4.0 through 10.5.2 allows attackers to abuse the Store API's batch endpoint to...
- News
Google Chrome Critical Update Patches High-Severity Code
Google releases emergency security update for Chrome addressing two high-severity vulnerabilities that could allow arbitrary code execution and system crashes.