Tag

#patching

4 stories · “patching”.

A screenshot of the WordPress administration dashboard showing the Dashboard, Site Health, At a Glance and Quick Draft panels.

Sep 23, 2026

WordPress Patches Comment2Shell, a Comment Flaw That Can Lead to Server Takeover

WordPress 7.1.1 fixed an unauthenticated stored cross-site scripting bug in wpautop(), tracked as CVE-2026-93485, that can escalate to remote code execution.

By TPW Editorial7 min read

Oracle branding beside a security advisory graphic representing the September 2026 Critical Security Patch Update

Sep 19, 2026

Oracle Ships 673 Security Patches, Including Six Maximum-Severity Flaws

Oracle's September 2026 security update fixes 672 CVEs across 17 product families, including six CVSS 10.0 flaws and 78 unauthenticated middleware bugs.

By TPW Editorial8 min read

The Check Point headquarters building, with the company's purple and white signage on the facade

Sep 15, 2026

Check Point Patches Two 9.8-Severity VPN Flaws That Allow Unauthenticated Code Execution

Check Point fixed two critical certificate-handling bugs in its VPN gateways and management servers. Dutch authorities expect attackers to exploit them soon.

By TPW Editorial7 min read

Sep 10, 2026

SAP Patches a CVSS 10.0 Kernel Flaw That Requires No Credentials

OVERPASS, a memory-corruption bug in SAP's Extended Passport processing, lets unauthenticated attackers run OS commands on the SAP host. A single kernel patch closes it.

By TPW Editorial4 min read