Kiteworks patches critical Advanced Forms flaw in release 9.5.1
Kiteworks took systems offline for a weekend on federal threat intel, then found and patched a critical flaw in its Advanced Forms feature. Fix is in release 9.5.1; no CVE assigned yet.
Stories tagged: #vulnerability
CIFSwitch: 19-year-old Linux CIFS bug gives any local user root
Researcher Asim Manizada disclosed CIFSwitch on May 28 — a cifs.spnego upcall flaw that grants root on default Mint, Rocky, AlmaLinux, Kali, and SUSE 15 SP7.