https://netsectribune.com/category/vulnerabilities/apache-tomcat-11-0-27-fixes-critical-cross/NetSec Tribuneen2026-10-20T18:38:04ZApache Tomcat 11.0.27 Fixes Critical Cross-Request Data Leak in Versions 11.0.0-M25 Through 11.0.26https://netsectribune.com/category/vulnerabilities/angular-router-ssr-flaw-crashes-node-js-workers/NetSec Tribuneen2026-10-20T18:33:15ZAngular Router SSR Flaw Crashes Node.js Workers via Query Parameter Amplificationhttps://netsectribune.com/category/cyber-attacks/qilin-and-inc-exploit-pan-os-bypass-to-bypass-mfa/NetSec Tribuneen2026-10-20T18:16:05ZQilin and Inc exploit PAN-OS bypass to bypass MFA and deploy ransomwarehttps://netsectribune.com/category/vulnerabilities/apache-urges-immediate-upgrade-to-couchdb-3-5-3/NetSec Tribuneen2026-10-20T17:55:21ZApache Urges Immediate Upgrade to CouchDB 3.5.3 to Block Critical Shell Command Executionhttps://netsectribune.com/category/vulnerabilities/cve-2026-92853-zero-length-cert-trigger-in-netx/NetSec Tribuneen2026-10-20T16:29:40ZCVE-2026-92853: Zero-Length Cert Trigger in NetX Duo Causes Pre-Auth Integer Wraphttps://netsectribune.com/category/vulnerabilities/advantech-adam-3600-vulnerability-allows-remote/NetSec Tribuneen2026-10-20T10:23:30ZAdvantech ADAM-3600 Vulnerability Allows Remote Code Execution Before Version 2.8.5.0https://netsectribune.com/category/vulnerabilities/db-gpt-mock-function-bug-enables-unauthenticated/NetSec Tribuneen2026-10-20T01:51:10ZDB-GPT Mock Function Bug Enables Unauthenticated Root Code Execution in Containershttps://netsectribune.com/category/vulnerabilities/grav-cms-image-processing-flaw-allows-remote/NetSec Tribuneen2026-10-19T20:19:11ZGrav CMS Image Processing Flaw Allows Remote Memory Exhaustion Attackshttps://netsectribune.com/category/vulnerabilities/cve-2026-112366-picomatch-redos-vulnerability/NetSec Tribuneen2026-10-19T16:08:57ZCVE-2026-112366: Picomatch ReDoS Vulnerability Freezes Node.js Apps via Glob Patternshttps://netsectribune.com/category/vulnerabilities/apache-camel-users-urged-to-patch-cve-2026-88900/NetSec Tribuneen2026-10-19T11:46:08ZApache Camel Users Urged to Patch CVE-2026-88900 to Block Unauthenticated Cluster RCEhttps://netsectribune.com/category/vulnerabilities/broadcom-wi-fi-flaw-enables-unauthenticated/NetSec Tribuneen2026-10-19T00:54:18ZBroadcom Wi-Fi Flaw Enables Unauthenticated Remote Code Execution on Routershttps://netsectribune.com/category/vulnerabilities/researcher-paulos-yibelo-reveals-pwnescape/NetSec Tribuneen2026-10-19T00:43:22ZResearcher Paulos Yibelo reveals PwnEscape: critical Linux KVM flaw breaks VM isolation via crafted packets