HackTrack

Security news

Recent vulnerabilities, the patches that close them, and what to do if you cannot update yet.

Severity

AllInfoLowMediumHigh

Pinned Post

High

Chrome zero-day in XML is being exploited, update now

Google's 9 November Chrome update fixes nine bugs, including CVE-2026-125350, a use-after-free in XML that Google says is exploited in the wild. Update to Chrome 157.0.8103.50 (Linux) or 157.0.8103.50/.51 (Windows, Mac) and relaunch.

  • chrome
  • google
  • zero-day
  • browser
  • cve-2026-125350
Read the briefing

More briefings

  • High

    Barracuda appliances can be taken over at root

    Barracuda's November 2026 patches close two flaws that, together, can give root on email gateways and other appliances. Apply the firmware patches and keep the admin interface off the public internet.

    • barracuda
    • rce
  • High

    Critical PHP bugs allow remote code execution

    PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 fix two critical bugs that can let an unauthenticated request run code. Updating is the only complete fix.

    • php
    • rce