Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a Denial of Service.
Multiple vulnerabilities in the Linux Kernel may allow an attacker to bypass security measures, cause a denial of service, or disclose sensitive info…
Linux Kernel vulnerabilities allow denial of service or unspecified attack via local exploitation.
Multiple vulnerabilities in the Linux Kernel allow a remote, anonymous attacker to perform unspecified attacks, including code execution, information…
Multiple vulnerabilities in the Linux Kernel allow an attacker to perform unspecified attacks, including memory corruption, data disclosure, data man…
Multiple vulnerabilities in the Linux Kernel allow an attacker to execute arbitrary code, escalate privileges, disclose information, manipulate data,…
Multiple vulnerabilities in the Linux Kernel allow an attacker to bypass security measures, manipulate data or system state, cause denial of service,…
Linux Kernel usbnet driver allows privilege escalation via race condition without authentication.
Linux Kernel allows local attackers to disclose sensitive information via TLS protocol out-of-bounds read.
Linux Kernel QFQ Plus Scheduler allows local privilege escalation via use-after-free.
Linux Kernel NTFS3 allows local attackers to disclose sensitive information via out-of-bounds read.
Linux Kernel NTFS3 allows local attackers to disclose sensitive information via out-of-bounds read.
Linux Kernel NTFS3 allows local attackers to disclose sensitive information via an out-of-bounds read.
Linux Kernel NTFS3 Journal Heap-based Buffer Overflow allows local code execution.
Linux Kernel NFSv4 server allows remote code execution via race condition with authentication required.
Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free allows local privilege escalation via high-privileged code execution.
Linux Kernel ksmbd share configuration race condition allows remote code execution with authentication.
Linux Kernel eMPIA USB Device Driver has a race condition leading to code execution.
Linux Kernel Netlink-based Wireless Configuration Integer Overflow allows local privilege escalation via high-privileged code execution.
Linux Kernel MCTP Routing allows local attackers to disclose sensitive information via uninitialized memory.
Linux Kernel SCTP subsystem race condition allows local information disclosure via low-privileged code execution.
Linux Kernel OpenvSwitch allows local privilege escalation via race condition.
Local code execution in the Linux Kernel can lead to information disclosure via a use-after-free vulnerability.
Linux Kernel nftables has a race condition vulnerability allowing local privilege escalation.
Linux Kernel NFC NCI UART Driver allows local privilege escalation via race condition.
Linux Kernel KSMBD allows remote code execution via a race condition in the Query Directory Request.
Linux Kernel's IPv6 VTI subsystem has a use-after-free vulnerability that allows local privilege escalation.
Mikrotik Routers have vulnerabilities that could allow admin hijacking.
Cisco Secure Email Gateway is vulnerable to SQL injection, allowing potential data manipulation.
Android devices have vulnerabilities that could allow code execution if not patched.
Cisco Secure Email Gateway and Secure Email and Web Manager are vulnerable to code execution via multiple critical and high severity vulnerabilities.
GitLab's vulnerability allows disclosure of sensitive data via path traversal.
Samsung mobile devices prior to SMR-SEP-2026 have multiple vulnerabilities that could allow code execution.
MongoDB Server versions prior to 7.0.43, 8.0.32, 8.3.11, 9.1.0-rc0, and 9.0.1 have a vulnerability in the collection validator constants parsing.
Parallels Desktop for Mac contains a high-severity vulnerability that could allow code execution.
A vulnerability with high severity was resolved in MISP, an open-source threat information sharing and analysis platform.
Multiple vulnerabilities in Citrix Systems Workspace App allow an attacker to perform an unspecified attack.
A remote attacker can exploit a vulnerability in Microsoft Edge to perform cross-site scripting and spoofing attacks.
A remote attacker can exploit a vulnerability in WP Royal Royal Elementor Addons to disclose information.
A local attacker can bypass security controls in wpa_supplicant.
An authenticated remote attacker can execute arbitrary code with administrator privileges in Puppet Enterprise, leading to full system compromise.
Net-SNMP is vulnerable to remote denial of service via unauthenticated attack.
A local attacker can exploit a vulnerability in libarchive to corrupt memory and cause a denial of service.
7-Zip allows remote, anonymous attackers to bypass security controls and manipulate data.
A local attacker can exploit a vulnerability in FRRouting to escalate privileges.
A local attacker can exploit a vulnerability in libTIFF to cause a denial of service or memory corruption.
A remote anonymous attacker can exploit a vulnerability in Red Hat Certificate System and Red Hat Enterprise Linux to disclose information.
A remote attacker can cause a denial of service via a vulnerability in memcached.
An authenticated remote attacker can bypass security controls in CPython.
Multiple vulnerabilities in PCRE2 allow attackers to bypass security controls, disclose information, or cause denial of service.
Red Hat Enterprise Linux (glib2) ist anfällig für mehrere Schwachstellen, die zu Denial of Service und Information disclosure führen können.
A remote attacker can cause a Denial of Service via a vulnerability in libarchive.
Remote attackers can exploit multiple vulnerabilities in Angular to manipulate files and execute cross-site scripting attacks.
A local attacker can cause a Denial of Service on Red Hat Enterprise Linux via a vulnerability in p11-kit.
Remote attackers can exploit multiple vulnerabilities in Oracle Java SE to compromise confidentiality, integrity, and availability.
Multiple vulnerabilities in Apache Tomcat allow an attacker to bypass security measures, escalate privileges, manipulate or disclose data, or cause d…
Remote attackers can exploit multiple vulnerabilities in Oracle Java SE to compromise confidentiality, integrity, and availability.
Remote attackers can exploit multiple vulnerabilities in Golang Go to cause denial of service, perform cross-site scripting, bypass security controls…
Multiple vulnerabilities in GStreamer allow an attacker to cause denial of service, disclose sensitive information, manipulate data, or execute arbit…
Remote attackers can exploit multiple vulnerabilities in Perl to cause denial of service or disclose confidential information.
PostgreSQL is vulnerable to multiple vulnerabilities allowing code execution, denial of service, information disclosure, file manipulation, SQL injec…
A remote attacker can cause a Denial of Service in QT.
Multiple vulnerabilities in ffmpeg allow local attackers to cause a denial of service.
Remote authenticated attacker can exploit multiple vulnerabilities in CyberPanel to manipulate data or disclose sensitive information.
Multiple vulnerabilities in Squid allow an attacker to perform a denial of service, execute arbitrary code, and bypass security controls.
A vulnerability in vim allows code execution.
Multiple vulnerabilities in vllm allow an attacker to bypass security controls, manipulate data, disclose sensitive information, or cause a denial of…
Remote authenticated attacker can exploit multiple vulnerabilities in Flowise to disclose information and bypass security controls, enabling further …
A local attacker can execute arbitrary code via a vulnerability in CUPS.
Strapi is vulnerable to Cross-Site Scripting via authenticated remote attacker.
MongoDB Server is vulnerable to data manipulation and denial of service via authenticated users with read/write privileges.
JFrog Artifactory is being actively exploited via network due to unresolved high-severity vulnerabilities CVE-2026-42016 and CVE-2026-42018.
ConnectWise ScreenConnect is vulnerable to code execution via CVE-2026-84869, which has been patched.
Multiple vulnerabilities in Flowise allow an attacker to bypass security controls and cause a denial of service.
Remote attackers can execute arbitrary code via multiple vulnerabilities in Check Point Security Gateway, Spark Firewall, and Security Management.
An authenticated remote attacker can exploit multiple vulnerabilities in Cisco Secure Firewall Management Center to gain root privileges, execute arb…
Multiple vulnerabilities in Samba allow an attacker to execute arbitrary code, cause denial of service, manipulate files, and bypass security control…
Budibase suffers from multiple vulnerabilities allowing elevation of privilege, bypass of security controls, SQL injection, and data manipulation.
Remote authenticated attacker can exploit multiple vulnerabilities in vllm to cause denial of service.