Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
Multiple vulnerabilities in Red Hat Enterprise Linux (libkcapi) allow an attacker to disclose information, manipulate data, cause memory corruption, …
A remote attacker can execute arbitrary code via a vulnerability in GNU Emacs and Red Hat Enterprise Linux.
A remote attacker can cause a denial of service in Red Hat Enterprise Linux via a vulnerability in golang.org/x/text.
Multiple vulnerabilities in Red Hat Enterprise Linux (corosync, libevent, libsoup) allow code execution, security-control bypass, data manipulation, …
Multiple vulnerabilities in Red Hat Enterprise Linux allow an attacker to escalate privileges, execute arbitrary code, manipulate or disclose data, a…
Multiple vulnerabilities in Red Hat Enterprise Linux allow an attacker to cause denial of service, disclose confidential information, gain elevated p…
Roundcube Webmail versions prior to 1.6.16 and 1.7.1 are vulnerable to CVE-2026-48842, which is being exploited in the wild.
Zyxel GS1900 series switches have a vulnerability that allows information disclosure via CVE-2026-7273.
Veeam Backup & Replication, Veeam ONE, and Veeam Service Provider Console are vulnerable to code execution via CVE-2026-32996.
MISP Prior to 2.5.47 allows read-only API keys to regain full role powers.
MongoDB products contain vulnerabilities requiring updates to address security risks.
Exim prior to 4.100.1 contains vulnerabilities that may allow information disclosure.
IBM products have vulnerabilities that could allow unauthorized access.
ManageEngine DataSecurity Plus contains high-severity vulnerabilities that could allow an attacker to bypass authentication and compromise data integ…
Checkmk allows attackers to bypass security controls and manipulate data through multiple vulnerabilities.
An authenticated remote attacker can exploit multiple vulnerabilities in Keycloak to escalate privileges, bypass security controls, and disclose info…
Multiple vulnerabilities in vllm allow data manipulation.
A remote attacker can manipulate data via a vulnerability in expat.
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow privilege escalation, bypass of security controls, data disclosure or…
Multiple vulnerabilities in Mozilla Firefox and Thunderbird allow an attacker to escalate privileges, bypass security controls, disclose sensitive in…
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow an attacker to escalate privileges, bypass security measures, disclos…
Multiple vulnerabilities in Mozilla Firefox and Thunderbird allow code execution and bypass security controls.
cURL vulnerabilities allow attackers to bypass security controls, disclose sensitive information, or manipulate data.
Local attacker can exploit multiple vulnerabilities in Docker Sandboxes to execute arbitrary code and bypass security controls.
An authenticated remote attacker can execute arbitrary code via a vulnerability in xwiki.
OpenClaw is vulnerable to remote authenticated denial of service attack.
Remote attackers can bypass security controls in Netty to manipulate data, disclose information, or cause denial of service.
A vulnerability in GNU libc allows a Denial of Service attack.
Multiple vulnerabilities in GNU libc allow an attacker to execute arbitrary code, disclose sensitive information, manipulate data, cause denial of se…
A remote attacker can exploit multiple vulnerabilities in CPython to disclose information and cause unspecified impacts.
A local attacker can exploit a vulnerability in GNU libc to cause a denial of service.
A remote attacker can cause a Denial of Service in CPython.
Multiple vulnerabilities in CPython allow an attacker to manipulate files, bypass security measures, or disclose confidential information.
An attacker can exploit multiple vulnerabilities in CPython to manipulate files and cause a denial of service.
A remote attacker can cause a Denial of Service in CPython.
A remote attacker can manipulate files via a vulnerability in CPython.
Multiple vulnerabilities in jq allow a remote, anonymous attacker to cause a denial of service.
A remote attacker can exploit a vulnerability in CPython to manipulate data.
A remote attacker can cause a Denial of Service in CPython.
A local attacker can bypass security measures via a vulnerability in jq.
An attacker can bypass security measures and manipulate data via multiple vulnerabilities in Python.
Attackers can exploit multiple vulnerabilities in CPython to bypass security controls and manipulate data.
A vulnerability in Python allows remote code execution.
Synology DiskStation Manager (DSM) contains vulnerabilities that could allow an attacker to read/write arbitrary files and compromise system availabi…
Rsyslog is vulnerable to remote code execution via CVE-2026-55556 and CVE-2026-61548, allowing service disruption.
MongoDB C Driver e Mongoid contain vulnerabilities that could allow an attacker to bypass security mechanisms, access sensitive information, alter or…
Two high-severity vulnerabilities in Exim could allow an attacker to access sensitive information, modify data or code, and compromise system availab…
cURL's multiple vulnerabilities allow attackers to bypass security controls, disclose confidential information, manipulate data, or cause denial of s…
Multiple vulnerabilities in WordPress allow an attacker to perform cross-site scripting, elevate privileges, disclose information, and bypass securit…
A remote attacker can bypass security controls and cause a denial of service in the Linux Kernel.
Local attacker can exploit multiple vulnerabilities in Linux Kernel to manipulate data or cause denial of service.
Multiple vulnerabilities in the Linux Kernel allow a denial of service attack.