Телеграм канал «SecPoint»

HPE Aruba Networking: 72 Critical Security Vulnerabilities Disclosed!

On 22 October 2026, HPE disclosed 72 vulnerabilities affecting ArubaOS AOS-8 and AOS-10, including eight with the maximum CVSS score of 10.0.

Several vulnerabilities could allow unauthenticated attackers to bypass authentication or execute malicious code on potentially affected wireless controllers, gateways and access points. Some attack scenarios require additional preconditions.

Organizations should restrict management interfaces and upgrade to the relevant fixed versions: AOS-10 10.8.1.2, 10.7.2.7 or 10.4.1.14, and AOS-8 8.13.3.1 or 8.10.0.24.

SecPoint Penetrator now includes targeted remote vulnerability checks for these critical HPE ArubaOS security flaws!

Our comprehensive vulnerability scanning platform can remotely identify HPE ArubaOS firmware versions potentially affected by these vulnerabilities, where reliable version information is available.

SecPoint Penetrator helps organizations discover vulnerable infrastructure, ide

eMudhra Certificate Trust Incident: Remote TLS Checks in SecPoint Penetrator

On 20 October 2026, Mozilla and Google disclosed weak private keys affecting eight eMudhra intermediate CAs, including six TLS issuers.
The affected intermediates issued no customer certificates, but browser vendors have blocked them and are removing trust in the related G3 root hierarchy.

SecPoint Penetrator's new remote checks inspect server-presented TLS certificate chains for exact affected eMudhra fingerprints and potential G3 certificate-trust failures.
These findings identify observable certificate exposure, not whether a server's outbound applications trust compromised CAs.

Review affected HTTPS services and migrate certificates to a trusted hierarchy where needed. Chrome's G3 root removal reaches its stable rollout from 27 October 2026.

🔹 Request a product demo:
https://www.secpoint.com/contact-us.html

🔹 Become a SecPoint partner:
https://www.secpoint.com/partner-signup.html

🔹 Get a FREE vulnerability scan:
https:

Critical Arista VeloCloud Vulnerability Under Active Exploitation

Arista has disclosed CVE-2026-114625, a critical SQL injection vulnerability (CVSS 9.9) affecting VeloCloud Orchestrator.

Attackers with even low-privilege portal access may escalate to superuser operator privileges, potentially compromising business-critical SD-WAN infrastructure.

Active exploitation has been confirmed. Organizations should review potentially affected on-premises deployments and upgrade to the appropriate fixed releases: 5.2.3.18, 6.1.3.10 or 6.4.2.12.

SecPoint Penetrator helps organizations identify security weaknesses, assess network exposure and strengthen vulnerability management.

🔹 Request a product demo:
https://www.secpoint.com/contact-us.html

🔹 Become a SecPoint partner:
https://www.secpoint.com/partner-signup.html

🔹 Get a FREE vulnerability scan:
https://www.secpoint.com/free-vulnerability-scan.html

#SecPoint #Arista #VeloCloud #CyberSecurity #VulnerabilityManagement

Critical GitLab Vulnerability: CVE-2026-110264 (CVSS 10.0)

GitLab disclosed a critical flaw on 21 October 2026 affecting self-managed GitLab Community and Enterprise Edition.
Under certain conditions, an unauthenticated attacker could execute code through an integer overflow in the regular-expression compiler.

Is your GitLab infrastructure exposed?
Scan with SecPoint Penetrator™.

SecPoint Penetrator helps identify exposed services, outdated software, and security weaknesses through actionable vulnerability reports.
A GitLab-specific version assessment is undergoing validation and can flag potentially affected installations when trustworthy version information is available.

Upgrade affected systems to GitLab 19.5.1, 19.4.3, 19.3.6, or the applicable patched backport (19.2.9, 19.1.9, 19.0.10, 18.11.13).

Request a product demo: https://www.secpoint.com/contact-us.php

Become a SecPoint partner: https://www.secpoint.com/partner-signup.php

#GitLab #CVE2026110264 #SecPointPenetrator #Cybersecurity #Vulnera

Is your Node.js application vulnerable to CVE-2026-111497?

A newly disclosed High-severity vulnerability in the Node.js Brotli decoder could allow remote code execution when attacker-controlled compressed data reaches the affected component.

Don't leave your infrastructure unchecked. Scan with SecPoint Penetrator™.

SecPoint Penetrator helps organizations discover exposed services, identify outdated software and prioritize vulnerabilities with actionable security reports.

Our new Node.js assessment is undergoing release validation and can identify potentially affected runtime versions when reliable version information is available.

Update Node.js to 22.23.4, 24.22.1 or 26.12.1, as applicable.

Request a SecPoint Penetrator demonstration:
https://www.secpoint.com/contact-me.php

Become a SecPoint partner:
https://www.secpoint.com/partner-signup.php

#NodeJS #CVE2026111497 #SecPointPenetrator #VulnerabilityScanning #Cybersecurity

PHP critical vulnerabilities: scan with SecPoint® Penetrator™

PHP has released fixes for CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities that can allow unauthenticated remote code execution. Apache mod_php deployments are particularly exposed.

Scan with SecPoint Penetrator to help identify potentially affected PHP systems and prioritise remediation. Detection depends on sufficient system information being available.

Affected unpatched upstream versions → first fixed release

8.2.0–8.2.34 → 8.2.35
8.3.0–8.3.35 → 8.3.36
8.4.0–8.4.26 → 8.4.27
8.5.0–8.5.11 → 8.5.12

Temporary hardening is not a complete fix. Upgrade promptly, confirm vendor backports where applicable, and verify the PHP runtime serving each website. Older branches require appropriate vendor fixes or migration to a supported release.

Scan. Patch. Verify.

Test SecPoint Penetrator:
https://www.secpoint.com/contact-me.html

Become a SecPoint partner:
https://www.secpoint.com/partner-signup.html

#PHP #CyberSecurity #Vulnerab

PHP: Upcoming Critical Security Release

PHP’s security team has announced an upcoming release addressing two critical vulnerabilities, each rated CVSS v4.0 9.2.

Public reporting identifies the issues as CVE-2026-109618 and CVE-2026-109619.

Technical details and affected-version information are scheduled for Wednesday, 21 October 2026 at 14:00 UTC.

PHP may release earlier if vulnerability details become public or active exploitation is detected.

Local release times:

Copenhagen / Stockholm: 16:00 CEST · London: 15:00 BST

New York: 10:00 EDT · San Francisco: 07:00 PDT

Dubai: 18:00 GST · Singapore: 22:00 SGT

SecPoint encourages organizations to review potentially affected systems, coordinate with hosting providers and prepare to apply the appropriate security updates promptly once available.

#PHP #CyberSecurity #CVE-2026-109619 #CVE-2026-109618 #SecPoint