New that day
- criticalpatched Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability Microsoft.AspNetCore.App.Runtime.linux-arm (nuget), Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget), Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget), Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (nuget) +7 more ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An aborted Kestrel HTTP/1 connection can reparse unread request-body bytes as…
- criticalpatched Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability Microsoft.AspNetCore.App.Runtime.linux-arm (nuget), Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget), Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget), Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (nuget) +7 more ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Kestrel accepts newline characters in HTTP/2 request trailers and values…
- highpatchedexploited Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands. Added to CISA KEV on 2026-10-13 (federal deadline 2026-10-16).
- highpatchedexploited Microsoft Windows Command Injection Vulnerability Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network. Added to CISA KEV on 2026-10-13 (federal deadline 2026-10-16).