# GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends Vulnerability / Web Security [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWjRcj8Bn8kWovv1-oDjSP61hMxx5U8u28qVJSPdP7mRBCNbs5EJjj…

# Cisco Crosswork Security Hardening Release: August 2026 Summary * As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patchi…

Original article [https://a.security/blog/asecurity-zoomsday](https://a.security/blog/asecurity-zoomsday) # Ⓐ Cyber Security | Blog | ZOOMSDAY A critical vulnerability in Zoom, a platform used by 70% of the Fortune 100, discovered by publicly available frontier models, allows an attacker participating in a meeting a zero-click remote code execution on all meeting participants across all native clients. This research emphasizes the risk of weaponized AI and how vulnerable we are as an industry. …

Ref: [https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939](https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939) **Severity of Bulletin:** Critical ### **Description of Problem** Multiple vulnerabilities have been discovered in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway). Refer below for further details. **Affected Versions:**  ----------------------- The following supported versions of NetScale…

# NatJack: A New Attack Class Against Network Infrastructure Devices natjack A NEW ATTACK CLASS AGAINST NETWORK INFRASTRUCTURE DEVICES Origin: [https://natjack.io/](https://natjack.io/) What is NatJack? ---------------- NatJack is a newly developed network address translation (NAT) table manipulation attack class effective against most virtual and physical network infrastructure performing NAT. These attacks can be used to hijack an existing TCP connection travers…

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6423-1 security@debian.org https://www.debian.org/security/ Nilesh Patra August 09, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : kitty CVE ID : CVE-2026-42850 CVE-2026-42851 CVE-2026-54055 CVE-2026-54057 Debian Bug : 1139898 …

# Support Content Notification - Support Portal - Broadcom support portal VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709) Initial Publication Date 29 July 2026 Affected CVE CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709 * Advisory ID: : Advisory Severity: * VMSA-2026-0006: Critical * Advisory ID: : CVSSv3 Range: * VMSA-2…

# Security Advisory - Action Required - July 2026 Security Update - Check Point Blog As part of Check Point’s Frontier AI Readiness Program, we are releasing a jumbo hotfix with security and hardening fixes for our firewall and management products. This update includes a number of security hardening improvements and fixes, the most significant of which are outlined below. During a routine BLAST review, we discovered a few vulnerabilities. Following a thorough analysis, we identified one of tho…

# CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED) Ref: [https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed/](https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed/) Overview -------- Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve…

Reference: https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc Overview Published: July 2, 2026 Version: 1.0 Revision: 1.0 Summary 1 of 25 A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device. Affected Products: UniFi Connect Application (Version 3.4.16 and earlier) Mitigation: Update your …