Tag
4 articles
CVE-2026-1928 is a high-severity (CVSS 8.8) PHP Object Injection flaw in the Rank Math SEO WordPress plugin, versions 1.0.276 and earlier. Any user with Contributor access can abuse the updateMeta REST API endpoint to inject a serialized object, write a webshell and take over the site. Here is how to detect and fix it.
6 min read
CVE-2026-109390 is a critical (CVSS 9.8) flaw in AnyDesk for Linux 8.0.0–8.0.2 that lets unauthenticated attackers run code as root. Public exploit code is available. Learn which versions are affected, how to patch to 8.0.3, and how to detect signs of compromise.
4 min read
Stalwart or Zimbra? A security-focused comparison of architecture, exploitation history, licensing and cost, with a clear verdict on which self-hosted mail server to run in 2026.
8 min read
Learn how to check, install, and automate security updates on Ubuntu Linux servers using apt and unattended-upgrades
1 min read Updated
