Web Application Security

Security Notices
CISA Adds Exploited SiteGuard Server Edition Command Injection to KEV
10/20/2026

CISA added exploited SiteGuard CVE-2026-106931 to KEV. Preserve diagnostics, apply the platform-specific update, investigate, and retain evidence.

Read this guide
Security Notices
INCIBE-CERT Reports Critical Tankuam Places Account Takeover Flaw
09/22/2026

Tankuam Places password-recovery tokens could reset other users' accounts, including administrators. Kompini reports a service-side correction; obtain confirmation that your deployment is covered and review suspicious reset activity rather than seeking a downloadable patch.

Read this guide