CyberPulse Cybersecurity News, with Source Links
FA
Cisco Security Advisories

Vulnerabilities in Node.js Affecting Cisco Products: October 2026

On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release…

Vulnerabilities & Zero-Day Networking & Internet
Read the full article at Cisco Security Advisories Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
AWS Security Bulletins

CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

Bulletin ID: 2026-155-AWS Publication Date: 10/28/2026 15:00 PM PDT Description: AWS is aware of CVE-2026-111497, an issue in the native Brotli decompression library that could allow a third party to run code or read process memory in an affected application. AWS Lambda, AWS Amplify, AWS App Runner, Amazon CloudWatch Synthetics, AWS CodeBuild, AWS Elastic Beanstalk, and AWS Elemental MediaLive are addressing this iss…

Vulnerabilities & Zero-Day Cloud Computing
منبع
Cisco Security Advisories

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mec…

Vulnerabilities & Zero-Day Identity & Access Security
منبع