Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
F5 BIG-IP APM is vulnerable to code execution via unspecified input.
F5 BIG-IP APM is vulnerable to exploitation leading to active attacks in the wild.
F5 BIG-IP APM is vulnerable to remote code execution via CVE-2026-94127.
Check Point products have vulnerabilities being exploited in the wild with CVE-2026-85102 and CVE-2026-93616.
F5 BIG-IP APM versions prior to specified hotfixes have a vulnerability exploited in the wild via CVE-2026-94127.
Arista Networks VeloCloud Orchestrator (VCO) On-Prem versions 5.2.0 to 5.2.3.15, 6.1.0 to 6.1.3.7, 6.4.0 to 6.4.2.7, 7.0.0 to 7.0.0.2 are affected by…
F5 BIG-IP APM is vulnerable to CVE-2026-94127, allowing potential exploitation in the wild.
Erlang OTP versions prior to 27.3.4.18 contain vulnerabilities leading to potential code execution.
Check Point products have vulnerabilities leading to remote code execution and authentication bypass.
CheckPoint Management Server is vulnerable to remote code execution via CVE-2026-93616.
Arista Networks VeloCloud Orchestrator is affected by a vulnerability exploited in the wild via CVE-2026-93952.
MISP contains multiple vulnerabilities that could allow a remote attacker to escalate privileges, execute arbitrary code, access sensitive informatio…
Multiple vulnerabilities in vllm allow a remote, anonymous attacker to cause a denial of service.
Remote attackers can exploit multiple vulnerabilities in drawio to perform cross-site scripting, bypass security controls, and manipulate or disclose…
A remote attacker can execute arbitrary code via a vulnerability in IBM App Connect Enterprise.
Webmin is vulnerable to multiple vulnerabilities that allow privilege escalation, code execution with administrator rights, and information disclosur…
An remote attacker can exploit multiple vulnerabilities in libssh2 to disclose sensitive information, cause a denial of service, or execute arbitrary…
Remote attackers can exploit multiple vulnerabilities in libssh2 to manipulate files, cause memory corruption, or trigger denial of service.
X.Org X11 allows remote code execution via a vulnerability.
A remote attacker can execute arbitrary code with administrator privileges via a vulnerability in Fluent Bit.
Checkmk allows file manipulation via a vulnerability.
A remote attacker can cause a Denial of Service and information disclosure via a vulnerability in Red Hat Enterprise Linux (coreutils).
Multiple vulnerabilities in Erlang/OTP allow an attacker to perform denial of service, bypass security controls, and manipulate or disclose data.
Multiple vulnerabilities in Mozilla Firefox and Thunderbird allow an attacker to escalate privileges, bypass security controls, disclose sensitive in…
Remote attackers can exploit multiple vulnerabilities in Red Hat Enterprise Linux to disclose information and cause denial of service.
Multiple vulnerabilities in Mozilla Firefox and Thunderbird allow attackers to execute arbitrary code, bypass security controls, disclose sensitive i…
Multiple vulnerabilities in Mozilla Firefox allow non-specific attacks.
An authenticated remote attacker can execute arbitrary code or cause a denial of service in Red Hat Enterprise Linux 389-ds-base.
Multiple vulnerabilities in Mozilla Firefox and Firefox ESR allow an attacker to execute arbitrary code.
Multiple vulnerabilities in Mozilla Firefox and Firefox ESR allow an attacker to execute arbitrary code, bypass security measures, or disclose confid…
Multiple vulnerabilities in Mozilla Thunderbird, Firefox ESR, and Firefox allow an attacker to escalate privileges, cause denial of service, disclose…
Multiple vulnerabilities in Mozilla Firefox and Thunderbird allow an attacker to cause a denial-of-service condition, execute arbitrary code, or perf…
Apache Airflow's critical vulnerability allows unauthorized bypass of security features.
Multiple vulnerabilities in Red Hat Enterprise Linux (corosync, libevent, libsoup) allow an attacker to execute arbitrary code, bypass security contr…
Local attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to execute arbitrary code, including code with root privileges, bypas…
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow an attacker to escalate privileges, bypass security controls, disclos…
Multiple vulnerabilities in Google Chrome / Microsoft Edge allow an attacker to execute arbitrary code, bypass security controls, gain elevated privi…
A remote attacker can exploit a vulnerability in memcached to cause a denial of service.
Multiple vulnerabilities in Joplin allow an attacker to compromise user accounts, gain elevated privileges, bypass security controls, execute arbitra…
Multiple vulnerabilities in Red Hat Enterprise Linux allow an attacker to cause a denial of service or disclose confidential information.
An authenticated remote attacker can trigger a denial of service in libxml2.
An authenticated remote attacker can exploit multiple vulnerabilities in strongSwan to cause denial of service, bypass security controls, disclose in…
Multiple vulnerabilities in libxml2 allow an attacker to bypass security controls, manipulate or disclose data, and cause a denial of service.
Checkmk Agent Receiver is vulnerable to remote authenticated denial of service attack.
A remote attacker can exploit a vulnerability in WebKitGTK to cause memory corruption and potentially execute arbitrary code or cause a denial of ser…
A local attacker can bypass security controls via a vulnerability in sudo.
rsyslog is vulnerable to remote denial of service via an anonymous attacker.
Multiple vulnerabilities in the Linux Kernel allow an attacker to perform unspecified attacks, potentially leading to data disclosure, manipulation, …
Redis is vulnerable to multiple issues allowing bypass of security mechanisms, unauthorized data access, denial of service, and data manipulation, wi…
An attacker can execute arbitrary code via multiple vulnerabilities in libTIFF.
WebKitGTK is vulnerable to a remote code execution flaw that may allow an attacker to cause memory corruption, leading to code execution or denial of…
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux (assertj) to disclose information and cause a denial of service.
Multiple vulnerabilities in the Linux Kernel allow an attacker to potentially bypass security measures, cause a denial-of-service, or disclose confid…
A vulnerability exists in Nextcloud Server allowing code execution via a publicly available PoC for CVE-2026-77165.
Conda is vulnerable to unauthorized file overwrites and writes in unexpected locations via malicious packages, impacting system integrity.
Telegram Desktop is vulnerable to a remote code execution exploit via CVE-2026-94488, allowing unauthorized access.
ntop contains vulnerabilities that could allow unauthorized access to sensitive information, bypass security features, execute arbitrary code, or mod…
Multiple vulnerabilities in Cisco Secure Firewall Management Center allow attackers to bypass security controls, execute arbitrary commands as root, …
Multiple vulnerabilities in OpenBao allow an attacker to escalate privileges, bypass security controls, or disclose sensitive information.
Veeam Backup & Replication is vulnerable to privilege escalation and data manipulation via multiple vulnerabilities.
Multiple vulnerabilities in WordPress allow attackers to execute arbitrary code, bypass security controls, perform cross-site scripting, and manipula…
Multiple vulnerabilities in WordPress allow an attacker to perform cross-site scripting, escalate privileges, disclose information, and bypass securi…
Cisco ThousandEyes Virtual Appliance is vulnerable to remote code execution via DHCP client command injection requiring authentication.