Fortra has released security advisories addressing a critical vulnerability and a high severity vulnerability found in FileCatalyst Workflow.
FileCatalyst is an accelerated file transfer software solution that allows the transfer of large files over remote networks. CVE-2024-6632 is an SQL injection vulnerability with a CVSSv3 score of 7.2 (high), which if exploited could allow an unauthenticated attacker to modify or delete data in the application database, and create administrative users.
Read more…
Source: NHS Digital
Related:
- Chrome 157 fixes 213 security issues, including 7 critical flaws
November 4, 2026
On November 3, Google issued Chrome 157 to the stable channel for Windows, Mac and Linux. The update is rolling out over the coming days and weeks. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 157.0.8103.38/.39 for Windows and Mac and 157.0.8103.38 for Linux. It includes 213 security fixes, including seven vulnerabilities rated Critical by ...
- Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
November 2, 2026
On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a missing authentication for critical function vulnerability (CWE-306), with a CVSSv3.1 score of 8.8; it allows a local authenticated attacker to escalate privileges. CVE-2026-118527, classified as generation of ...
- ‘SMS of Death’ exploit can remotely crash unpatched Android phones
November 2, 2026
A zero-click Android flaw let attackers crash phones with a specially crafted SMS message. Repeated messages could trigger reboot loops, disrupt calls, and even affect emergency connectivity. Google patched supported Android versions, but many end-of-life devices remain permanently vulnerable. Read more… Source: Tech Radar Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered right ...
- Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated)
October 29, 2026
Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619, referred to as PHP2Shell. Both are remote code execution (RCE) vulnerabilities rated as 9.2 (CVSS 4.0). Researchers encourage reviewing the PHP Group’s security advisory and patching guidance. PHP is widely used across web servers and content management systems globally. Researchers recommend assessing your ...
- Hackers are breaking into company networks via hacked CCTV camera software
October 29, 2026
Attackers abused camera management software to gain initial access and establish persistence on networks. Campaign used DLL sideloading and reverse shells to evade detection and maintain control. Researchers urge treating camera systems as security-sensitive assets and monitoring them for abnormal activity. Read more… Source: Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered ...
- Chrome and Firefox updates fix serious security flaws
October 28, 2026
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On the same day, Mozilla issued Security Advisory 2026-118, which fixes 167 vulnerabilities. Firefox 159 also ...