SecPoint

OpenSSH Password Authentication Bypass on Alpine Linux CVE-2026-123158 was publicly disclosed on 5 November 2026. An attacker reaching SSH on certain musl-based Linux systems, including Alpine Linux, may log in to accounts that should not accept passwords. Exploitation requires OpenSSH without PAM, SSH password authentication enabled, a passwordless account and another account with a stored password hash. Ordinary glibc-based Linux installations are not affected by this issue. Update to the applicable fixed OpenSSH or Alpine package, then restart sshd. If patching is delayed, disable SSH password authentication after confirming key-based access works. SecPoint Penetrator helps organizations assess network exposure. Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… Become a SecPoint partner: secpoint.com/partner-signup.… #SecPoint #OpenSSH #AlpineLinux #AuthenticationBypass #CyberSecurity

SecPoint MPTCP Scanner: Review Protocol Exposure Which of your reachable services negotiate Multipath TCP? SecPoint's standalone MPTCP scanner identifies this capability on authorized IPv4 services, helping teams review unexpected protocol exposure and confirm whether it is required. Published research for CVE-2026-98432 included an MPTCP listener. The scanner's result supports that exposure review. Use the findings to identify service owners, review network access and prioritize vendor patch verification on potentially affected systems. SecPoint Penetrator helps organizations assess network exposure and prioritize remediation. Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… Become a SecPoint partner: secpoint.com/partner-signup.… #SecPoint #MPTCP #LinuxSecurity #AttackSurfaceManagement #CyberSecurity

Ivanti Connect Secure: Exploited VPN Vulnerability Chain Already patched your VPN in October? Check the later fixes too. Ivanti updated its advisory on 29 October 2026 to include CVE-2026-111357 and CVE-2026-118527 alongside CVE-2026-104935. The chain has been used to gain unauthenticated root-level access to affected VPN appliances. The newer flaws individually require authenticated access; they are not standalone unauthenticated takeovers. Potentially affected systems need the correct branch-specific updates and a separate review for compromise. Patching does not undo credential theft. SecPoint Penetrator helps organizations assess exposed services and prioritize remediation. Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… Become a SecPoint partner: secpoint.com/partner-signup.… #SecPoint #Ivanti #VPNSecurity #VulnerabilityManagement #CyberSecurity

youtube.com/watch?v=BPm8j4ZH… Stronger security behind the Penetrator web interface. SecPoint® Penetrator™ V70 strengthens the appliance’s PHP runtime and login-session protection with several security updates. In this video, we explain what has changed: • PHP 8.4.27, addressing two critical PHP vulnerabilities. • HttpOnly and SameSite cookie attributes, helping reduce session-cookie exposure to scripts and unwanted cross-site requests. • Disabled PHP session upload-progress tracking. Together, these improvements reinforce the protection of the Penetrator web platform and login sessions while remaining transparent during normal use. Watch the video for a closer look at the security improvements in Penetrator V70. Learn more about SecPoint Penetrator: secpoint.com/penetrator.html Request a free vulnerability scan: secpoint.com/free-vulnerabil… Become a SecPoint partner: secpoint.com/partner-signup.… #SecPoint #Penetrator #PHP #CyberSecurity #VulnerabilityManagement

Less waiting. A more responsive web interface. SecPoint® Penetrator™ V70 improves web-interface performance with its new web server and high performance module, making everyday work in Penetrator faster and smoother. In this video, we take a closer look at the performance upgrade and the speed improvements it brings to the web interface. Whether you are managing scans, reviewing vulnerability findings or navigating between reports, a responsive interface helps you get on with your work. Watch the video to discover the performance improvements in Penetrator V70. Learn more about SecPoint Penetrator: secpoint.com/penetrator.html Request a free vulnerability scan: secpoint.com/free-vulnerabil… Become a SecPoint partner: secpoint.com/partner-signup.… #SecPoint #Penetrator #VulnerabilityScanning #CyberSecurity

Drupal Commerce: Actively Exploited Access Bypass Drupal disclosed CVE-2026-118539 on 28 October 2026, affecting the Commerce Core module, not Drupal core generally. Maintainers confirmed attempts to place fraudulent orders on live shops. This is an access-control flaw with possible financial impact, not a reported remote-code-execution issue. Update potentially affected systems to the fixed Commerce Core release for their branch and audit recent orders for payment and pricing inconsistencies. SecPoint Penetrator helps organizations identify exposed services and prioritize vulnerability remediation. Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… Become a SecPoint partner: secpoint.com/partner-signup.… #SecPoint #DrupalCommerce #AccessControl #VulnerabilityManagement #CyberSecurity

ClickHouse Server: Critical Remote Code Execution Vulnerability ClickHouse disclosed CVE-2026-116366 on 30 October 2026. Under certain conditions, an unauthenticated attacker with network access could execute arbitrary code on a ClickHouse server. Potentially affected self-hosted systems should be updated to the appropriate vendor-fixed release for their branch. Restrict database access to trusted sources and verify the running server version after updating. ClickHouse reports that the fix has already been applied to all ClickHouse Cloud and BYOC deployments. SecPoint Penetrator helps organizations identify exposed services and prioritize vulnerability remediation. Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… Become a SecPoint partner: secpoint.com/partner-signup.… #SecPoint #ClickHouse #RemoteCodeExecution #DatabaseSecurity #VulnerabilityManagement

WordPress Core: Exploited Remote Code Execution Vulnerability WordPress disclosed an upgrade-process vulnerability on 28 October 2026, now tracked as CVE-2026-119977. Linux and Windows installations can be affected. During full-package core updates, an unauthenticated attacker who wins a timing race could execute code through a web-accessible temporary installer. Exploitation requires the vulnerable upgrade window, not simply an exposed website. Protect potentially affected systems by blocking web access to the temporary upgrade directory before updating to WordPress 7.1.4 or the applicable fixed release for your branch. SecPoint Penetrator helps organizations identify exposed web services and prioritize remediation. Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… Become a SecPoint partner: secpoint.com/partner-signup.… #SecPoint #WordPress #RemoteCodeExecution #VulnerabilityManagement #CyberSecurity

Progress WS_FTP Server: Critical Security Vulnerabilities Progress Software has disclosed critical WS_FTP Server vulnerabilities on Windows. CVE-2026-84295 (CVSS 10.0) could expose administrative credentials to unauthenticated attackers. CVE-2026-90868 (CVSS 9.9) could allow attackers with low privileges to execute operating-system commands under certain configurations. Identify potentially affected systems and update to WS_FTP Server 2024.0.7 or 2025.0.4, or a later supported release for your branch. Restrict administrative access and investigate possible credential exposure. SecPoint has developed a targeted remote assessment for SecPoint Penetrator to help identify potentially affected WS_FTP Server versions. Contact us about availability and assessing your deployment. Scan with SecPoint Penetrator to uncover vulnerabilities, identify exposed services and prioritize critical security updates. Request a product demo: secpoint.com/contact-us.php Become a SecPoint partner: secpoint.com/partner-signup.… Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… #SecPoint #WSFTP #FileTransferSecurity #VulnerabilityManagement #CyberSecurity

Adobe Campaign Classic: Eight Critical Vulnerabilities Adobe has released fixes for eight critical vulnerabilities, including low-privilege code execution (CVE-2026-104351) and unauthenticated SQL injection (CVE-2026-105781). Potentially affected systems include Campaign Classic v7 7.4.4 build 9402 and earlier on Windows and Linux. Adobe identifies build 9403 as the security fix and reported no known exploitation when publishing its bulletin. On-premise and hybrid administrators should install the update and restart the Campaign server. Adobe-hosted instances have already been remediated. SecPoint has developed a targeted remote assessment for SecPoint Penetrator to help identify potentially affected Adobe Campaign Classic v7 components. Contact us about availability and assessing your deployment. Scan with SecPoint Penetrator to uncover vulnerabilities, identify exposed services and prioritize critical security updates. Request a product demo: secpoint.com/contact-us.html Become a SecPoint partner: secpoint.com/partner-signup.… Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… #SecPoint #AdobeCampaign #ApplicationSecurity #VulnerabilityManagement #CyberSecurity

Cyprus is a beautiful country, and it was a great pleasure to visit Nicosia for The Future of Cybersecurity 2026, organized by Data Ally on 23 September. During my speaking engagement, I had the opportunity to showcase the latest SecPoint Penetrator Vulnerability Scanner and demonstrate how organizations can identify security vulnerabilities across networks, servers, web applications, and exposed services. SecPoint Penetrator combines advanced CVE detection, authenticated Windows vulnerability and patch scanning, automated network security assessments, full 65,535 TCP port scanning, CIDR network scanning, SSL/TLS security checks, Dark Web Search, and visual network mapping. With customizable white-label reporting, CVSS risk scoring, XLS exports, and detailed vulnerability reports, Penetrator also provides a powerful solution for IT security providers, MSPs, and cybersecurity partners looking to deliver professional vulnerability assessment services under their own brand. With new vulnerabilities constantly being discovered and cyber threats evolving, proactive vulnerability scanning is more important than ever. Outside the conference, I also had some time to explore the beautiful city of Nicosia with my cybersecurity book, "How They Hack You?!" I visited the impressive Eleftheria Square, designed by Zaha Hadid Architects, the historic Faneromeni Church, and the lively Ledra Street in the old town. Nicosia is a fascinating combination of modern architecture, history, and culture. Cyprus is definitely a wonderful country to visit, with welcoming people and a great atmosphere. Many thanks to Data Ally for organizing the event and bringing cybersecurity professionals together to exchange knowledge and discuss the future of cybersecurity. Get a Free Vulnerability Scan: secpoint.com/free-vulnerabil… Become a SecPoint Partner: secpoint.com/partner-signup.… #SecPoint #Penetrator #Cybersecurity #Nicosia #Cyprus

WatchGuard Fireware OS: Critical Firewall Vulnerabilities and New Penetrator Checks On 27 October 2026, WatchGuard disclosed serious vulnerabilities affecting Fireware OS, including CVE-2026-93857, CVE-2026-93865 and CVE-2026-93866. All three are rated Critical (CVSS 9.2). Depending on configuration, the flaws may permit unauthenticated code execution through the SIP proxy, privileged FireCluster actions or Access Portal memory corruption. SecPoint Penetrator now includes targeted remote WatchGuard firmware assessments, identifying Fireware OS versions affected by these CVEs when reliable version information is available. Our comprehensive vulnerability scanning platform helps organizations discover exposed infrastructure, prioritize security updates and strengthen vulnerability management across vendors. Apply Fireware OS 2026.4, 12.12.4 or 12.5.22 for applicable T15/T35 devices. Request a product demo: secpoint.com/contact-us.html Become a SecPoint partner: secpoint.com/partner-signup.… Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… #SecPoint #WatchGuard #FirewareOS #VulnerabilityScanning #CyberSecurity

HashiCorp Consul: Critical Service Mesh Security Vulnerabilities On 26 October 2026, HashiCorp disclosed serious authorization vulnerabilities affecting Consul and consul-k8s. CVE-2026-105765 may expose cached service certificates and private keys through accessible Consul agent APIs without a valid ACL token. CVE-2026-110720 may allow attackers with specific Kubernetes permissions to obtain elevated Consul privileges. SecPoint Penetrator delivers comprehensive remote vulnerability scanning across business-critical infrastructure. We are expanding Penetrator with dedicated HashiCorp Consul version checks to identify affected software releases through reliable remote assessment. Our continuously evolving vulnerability assessment platform helps organizations discover security weaknesses, identify exposed systems and prioritize critical updates. Discover vulnerabilities before attackers exploit them. Strengthen your security with SecPoint Penetrator. Request a product demo: secpoint.com/contact-us.html Become a SecPoint partner: secpoint.com/partner-signup.… Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… #SecPoint #HashiCorp #Consul #VulnerabilityScanning #CyberSecurity

SecPoint Penetrator V69: New One-Page Security Assessment Certificate SecPoint Penetrator V69 introduces a new One-Page Certificate for Vulnerability Assessment and Penetration Testing (VAPT) technical-readiness assessments. In this video, we demonstrate the new certificate option and how administrators can generate professional assessment documentation directly from the Report menu. The new certificate includes: ✔ Overall vulnerability assessment results and technical-readiness conclusion ✔ Assessment date, scanned targets and scan profile ✔ Technical-readiness level against the selected security standard or scan profile ✔ Security best-practice recommendations ✔ Clear certificate validity conditions in a professional one-page format The new certificate is ideal for customer documentation, audit evidence and communicating technical security assessment results. 🔹 Request a product demo: secpoint.com/contact-us.html 🔹 Become a SecPoint partner: secpoint.com/partner-signup.… 🔹 Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… #SecPoint #CyberSecurity #VulnerabilityScanning #Penetrator #SecurityAssessment

HPE Aruba Networking: 72 Critical Security Vulnerabilities Disclosed! On 22 October 2026, HPE disclosed 72 vulnerabilities affecting ArubaOS AOS-8 and AOS-10, including eight with the maximum CVSS score of 10.0. Several vulnerabilities could allow unauthenticated attackers to bypass authentication or execute malicious code on potentially affected wireless controllers, gateways and access points. Some attack scenarios require additional preconditions. Organizations should restrict management interfaces and upgrade to the relevant fixed versions: AOS-10 10.8.1.2, 10.7.2.7 or 10.4.1.14, and AOS-8 8.13.3.1 or 8.10.0.24. SecPoint Penetrator now includes targeted remote vulnerability checks for these critical HPE ArubaOS security flaws! Our comprehensive vulnerability scanning platform can remotely identify HPE ArubaOS firmware versions potentially affected by these vulnerabilities, where reliable version information is available. SecPoint Penetrator helps organizations discover vulnerable infrastructure, identify critical security weaknesses and prioritize urgent security updates. Don't wait for attackers to find your weaknesses. Find them first with SecPoint Penetrator! 🔹 Request a product demo: secpoint.com/contact-us.html 🔹 Become a SecPoint partner: secpoint.com/partner-signup.… 🔹 Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… #SecPoint #ArubaNetworking #WirelessSecurity #VulnerabilityManagement #CyberSecurity

eMudhra Certificate Trust Incident: Remote TLS Checks in SecPoint Penetrator On 20 October 2026, Mozilla and Google disclosed weak private keys affecting eight eMudhra intermediate CAs, including six TLS issuers. The affected intermediates issued no customer certificates, but browser vendors have blocked them and are removing trust in the related G3 root hierarchy. SecPoint Penetrator's new remote checks inspect server-presented TLS certificate chains for exact affected eMudhra fingerprints and potential G3 certificate-trust failures. These findings identify observable certificate exposure, not whether a server's outbound applications trust compromised CAs. Review affected HTTPS services and migrate certificates to a trusted hierarchy where needed. Chrome's G3 root removal reaches its stable rollout from 27 October 2026. 🔹 Request a product demo: secpoint.com/contact-us.html 🔹 Become a SecPoint partner: secpoint.com/partner-signup.… 🔹 Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… #SecPoint #Penetrator #eMudhra #TLS #CyberSecurity

Critical Arista VeloCloud Vulnerability Under Active Exploitation Arista has disclosed CVE-2026-114625, a critical SQL injection vulnerability (CVSS 9.9) affecting VeloCloud Orchestrator. Attackers with even low-privilege portal access may escalate to superuser operator privileges, potentially compromising business-critical SD-WAN infrastructure. Active exploitation has been confirmed. Organizations should review potentially affected on-premises deployments and upgrade to the appropriate fixed releases: 5.2.3.18, 6.1.3.10 or 6.4.2.12. SecPoint Penetrator helps organizations identify security weaknesses, assess network exposure and strengthen vulnerability management. 🔹 Request a product demo: secpoint.com/contact-us.html 🔹 Become a SecPoint partner: secpoint.com/partner-signup.… 🔹 Get a FREE vulnerability scan: secpoint.com/free-vulnerabil… #SecPoint #Arista #VeloCloud #CyberSecurity #VulnerabilityManagement

Critical GitLab Vulnerability: CVE-2026-110264 (CVSS 10.0) GitLab disclosed a critical flaw on 21 October 2026 affecting self-managed GitLab Community and Enterprise Edition. Under certain conditions, an unauthenticated attacker could execute code through an integer overflow in the regular-expression compiler. Is your GitLab infrastructure exposed? Scan with SecPoint Penetrator™. SecPoint Penetrator helps identify exposed services, outdated software, and security weaknesses through actionable vulnerability reports. A GitLab-specific version assessment is undergoing validation and can flag potentially affected installations when trustworthy version information is available. Upgrade affected systems to GitLab 19.5.1, 19.4.3, 19.3.6, or the applicable patched backport (19.2.9, 19.1.9, 19.0.10, 18.11.13). Request a product demo: secpoint.com/contact-us.php Become a SecPoint partner: secpoint.com/partner-signup.… #GitLab #CVE2026110264 #SecPointPenetrator #Cybersecurity #VulnerabilityManagement

Is your Node.js application vulnerable to CVE-2026-111497? A newly disclosed High-severity vulnerability in the Node.js Brotli decoder could allow remote code execution when attacker-controlled compressed data reaches the affected component. Don't leave your infrastructure unchecked. Scan with SecPoint Penetrator™. SecPoint Penetrator helps organizations discover exposed services, identify outdated software and prioritize vulnerabilities with actionable security reports. Our new Node.js assessment is undergoing release validation and can identify potentially affected runtime versions when reliable version information is available. Update Node.js to 22.23.4, 24.22.1 or 26.12.1, as applicable. Request a SecPoint Penetrator demonstration: secpoint.com/contact-me.php **Become a SecPoint partner:** secpoint.com/partner-signup.… #NodeJS #CVE2026111497 #SecPointPenetrator #VulnerabilityScanning #Cybersecurity

PHP critical vulnerabilities: scan with SecPoint® Penetrator™ PHP has released fixes for CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities that can allow unauthenticated remote code execution. Apache mod_php deployments are particularly exposed. Scan with SecPoint Penetrator to help identify potentially affected PHP systems and prioritise remediation. Detection depends on sufficient system information being available. Affected unpatched upstream versions → first fixed release 8.2.0–8.2.34 → 8.2.35 8.3.0–8.3.35 → 8.3.36 8.4.0–8.4.26 → 8.4.27 8.5.0–8.5.11 → 8.5.12 Temporary hardening is not a complete fix. Upgrade promptly, confirm vendor backports where applicable, and verify the PHP runtime serving each website. Older branches require appropriate vendor fixes or migration to a supported release. Scan. Patch. Verify. Test SecPoint Penetrator: secpoint.com/contact-me.html Become a SecPoint partner: secpoint.com/partner-signup.… #PHP #CyberSecurity #VulnerabilityManagement #Penetrator #SecPoint