NewsThe Register — Security
Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era
Teaser from the source
Upgrade, migrate, but don't prevaricate – time has run out
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on permanently
Other advisories
- HighCVE-2026-123865An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors. If a peer triggers a protocol error, for example an oversiz…
- Not ratedosv:CVE-2026-85033Bluetooth Classic AVRCP Target: missing TX cleanup on disconnect permanently stalls vendor-dependent responses and leaks them to the next peer
- Not ratedosv:CLEANSTART-2026-IL13610Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests
- MediumCVE-2026-116774russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
- MediumCVE-2026-116774russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
- MediumCVE-2026-76780The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.6. This is due to the plugin permanently granti…
- Not ratedosv:CVE-2026-116774russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
- MediumCVE-2026-118178A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then…
Other news entries
- Calling viral AI actress Tilly Norwood? Agree to a face scan firstNewsBleepingComputer
- Viral AI actress' hotline face-scans every caller, watches their moodNewsBleepingComputer
- Anthropic is cutting Claude Code's current weekly limits by 17%NewsBleepingComputer
- Claude Fable 5 isn’t permanently leaving subscriptions, Anthropic saysNewsBleepingComputer
ID