Vulnerability Archives - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

How to Protect Linux from...

Key Takeaways Linux systems are not immune to ransomware — attacks are rising, especially against servers, cloud environments, and enterprise infrastructure. Linux ransomware often uses targeted, high-impact tactics like double...

2026 Linux Malware: How to...

Key Takeaways Linux malware is rising fast in 2026, targeting servers, containers, and IoT devices with ransomware, cryptojackers, and rootkits. Attackers exploit outdated software, misconfigured SSH, and cloud misconfigurations —...

Linux Kernel Vulnerabilities 2026: Latest...

Key Takeaways Linux kernel vulnerabilities can lead to privilege escalation, data leaks, and service downtime. Common flaws include memory corruption, race conditions, side-channel attacks, and privilege escalation. Continuous scanning and...

RegreSSHion: Why a Six-Month-Old Vulnerability...

Cybersecurity professionals know that vulnerabilities rarely fade into obscurity just because they’re patched or reported. The release of a public proof of concept (PoC) can breathe new life into old...

The Great Kernel CVE Flood...

“We’re just doing what cve.org wants us to do” was repeated multiple times by Greg K-H in a recent presentation. Earlier this year, the Kernel team’s new CNA (CVE Numbering...

The Sky is Falling!...

We’ve been here before, haven’t we? Every other week, a new vulnerability with a sky-high CVSS score causes a frenzy. This time, it’s a 9.9 CVSS vulnerability that was billed...

MS Exchange Server Flaw: Keylogger...

In a recent revelation, an unidentified malicious actor has been exploiting vulnerabilities in Microsoft Exchange Server to infiltrate systems with a keylogger malware, targeting various entities across Africa and the...

BIG-IP Vulnerability Alert: Remote Code...

In recent news, F5 has issued a critical security alert regarding a significant BIG-IP vulnerability that poses a severe risk to their BIG-IP systems. This vulnerability, rated at 9.8 out...

Moving Beyond CVSS Scores for...

Since 2016, new vulnerabilities reported each year have nearly tripled. With the increasing number of discovered vulnerabilities, organizations need to prioritize which of them need immediate attention. However, the task...

Cisco Emergency Responder Patch: Critical...

Cisco has recently provided a series of key security upgrades aimed at correcting a notable vulnerability inside its Cisco Emergency Responder (CER) in an earnest effort to enhance the security...

CVE-2023-4863: Just How Deep Does...

Vulnerability: Heap Buffer Overflow in libwebp CVE ID: CVE-2023-4863 CVSS Score: 8.8 (Though a different CVE merged into this one was scored 10.0. The 8.8 score will likely be updated...