Critical Vulnerability in cPanel & WHM

12 August 2026August 2026 Monthly PatchMicrosoft has released security patches to address multiple vulnerabilities in their software and products.12 August 2026Security Bulletin 12 Aug 2026 [PDF, 2MB]7 August 2026Missing Encryption Vulnerability in Apache TomcatAttackers can exploit a missing encryption vulnerability in Apache Tomcat to bypass the EncryptInterceptor, potentially exposing sensitive data transmitted between cluster nodes. Patch immediately.7 August 2026Multiple Vulnerabilities in Cisco IOS XE SoftwareMultiple vulnerabilities have been identified in Cisco IOS XE Software that could allow attackers to execute arbitrary commands, bypass security controls, gain unauthorised access, disclose sensitive information, or affect the operation of vulnerable systems. Patch immediately.7 August 2026Multiple Vulnerabilities in Cisco Catalyst SD-WAN SoftwareAttackers can exploit multiple vulnerabilities in Cisco Catalyst SD-WAN Software to bypass security controls, gain unauthorised access, access or manipulate files, and disclose sensitive information. Patch immediately.6 August 2026CatchPulse – Multiple Vulnerabilities including Improper Access Control, Unprivileged SYSTEM-Level Operations and Denial of Service Multiple vulnerabilities have been discovered in CatchPulse. SecureAge, the product owner, has rolled out fixes for all reported vulnerabilities. Special thanks to the informer and SecureAge for coordinating through CSA's Responsible Vulnerability Disclosure Policy.6 August 2026Active exploitation of Critical Vulnerability in IBM Langflow OSS Attackers are actively exploiting a critical vulnerability in IBM Langflow OSS to achieve unauthenticated remote code execution (RCE). Users and administrators of affected products are advised to apply the latest security