Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
Linux Kernel versions prior to specified patches contain a vulnerability that could allow information disclosure.
Multiple vulnerabilities in the Linux Kernel allow an attacker to cause a Denial of Service or achieve unspecified impacts.
Multiple vulnerabilities in the Linux Kernel allow an attacker to potentially bypass security measures, cause a denial of service, or disclose confid…
Multiple vulnerabilities in the Linux Kernel allow an attacker to cause a Denial of Service or other unspecified impacts.
Multiple vulnerabilities in the Linux Kernel allow an attacker to execute arbitrary code, escalate privileges, disclose information, manipulate data,…
Multiple vulnerabilities in the Linux Kernel allow an attacker to bypass security measures, manipulate data or system state, cause denial of service,…
Remote attackers can exploit multiple vulnerabilities in Linux Kernel to cause memory errors, kernel crashes, denial-of-service conditions, and memor…
A local attacker can cause a denial of service or achieve an unspecified impact via multiple vulnerabilities in the Linux Kernel.
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a denial of service or perform unspecified attacks.
wolfSSL versions prior to 5.9.4 are affected by vulnerabilities requiring updates.
NeuVector prior to 5.4.11, 5.5.4, and 5.6.2 is vulnerable to OS command injection in packet-capture filter leading to remote code execution on Kubern…
Multiple IBM products have vulnerabilities that could allow unauthorized access.
Dell products have vulnerabilities leading to incorrect permission assignment for critical resources.
Multiple vulnerabilities in NetScaler ADC and NetScaler Gateway could allow remote code execution.
CSIRT Italia reports the analysis of the most critical cybersecurity vulnerabilities in August 2026.
Citrix NetScaler ADC and Gateway versions before specified are affected by multiple vulnerabilities with potential security impacts.
Velero is vulnerable to information disclosure and arbitrary code execution via multiple vulnerabilities.
A vulnerability in Kiteworks Advanced Forms allows a non-specific attack.
X.Org X11 is vulnerable to multiple denial of service attacks via unspecified vectors.
Multiple vulnerabilities in vim allow an attacker to execute arbitrary code, cause a denial of service, and cause unspecified effects.
Remote attackers can execute arbitrary code via multiple vulnerabilities in vim.
Multiple vulnerabilities in vim allow an attacker to cause a denial of service, disclose information, and execute arbitrary code.
An attacker can execute arbitrary code and cause a denial of service in vim.
A vulnerability in vim allows a Denial of Service attack.
Local attacker can exploit multiple vulnerabilities in vim to execute code and cause denial of service.
Multiple vulnerabilities in vim allow remote code execution.
A remote attacker can cause a denial of service in Red Hat Enterprise Linux (rhc).
A remote attacker can exploit a vulnerability in QT to cause a denial of service.
Multiple vulnerabilities in Red Hat Enterprise Linux (FreeIPA) allow attackers to cause denial of service, perform cross-site scripting, disclose inf…
A remote attacker can exploit a vulnerability in expat to manipulate data.
A vulnerability in expat allows a Denial of Service attack.
Multiple vulnerabilities in Red Hat Enterprise Linux (pcp) allow an attacker to execute arbitrary code, escalate privileges, bypass security controls…
Multiple vulnerabilities in vllm allow an attacker to disclose information and cause a denial of service.
FreeRDP is vulnerable to multiple vulnerabilities that could allow a denial of service attack or an unspecified attack.
A vulnerability in Kiteworks Secure File Sharing & Transfer allows an attacker to perform an unspecified attack.
Multiple vulnerabilities in ESRI ArcGIS allow non-specific attack.
Multiple vulnerabilities in Apache Tomcat allow an attacker to bypass security measures, escalate privileges, manipulate or disclose data, or cause d…
Coolify allows remote attackers to bypass security controls.
An authenticated remote attacker can bypass security controls in LiteLLM to disclose information and perform unauthorized actions.
QEMU allows local code execution with user privileges, bypassing security controls and enabling data manipulation or disclosure.
Multiple vulnerabilities in MediaWiki Extensions allow code execution, bypass security controls, enable XSS, and allow data manipulation or disclosur…
Multiple vulnerabilities in IBM App Connect Enterprise allow an attacker to bypass security controls, leading to denial of service, information discl…
Multiple vulnerabilities in IBM QRadar SIEM allow an attacker to execute arbitrary code, escalate privileges, cause denial of service, disclose infor…
Multiple vulnerabilities in vm2 allow a remote attacker to execute arbitrary code, bypass security controls, and cause a denial of service.
Multiple vulnerabilities in Google Chrome and Microsoft Edge allow attackers to execute arbitrary code, bypass security controls, and cause denial-of…
Multiple vulnerabilities in Google Chrome / Microsoft Edge allow an attacker to execute arbitrary code, bypass security controls, escalate privileges…
Multiple vulnerabilities in Google Chrome / Microsoft Edge allow unauthorized code execution and bypass of security controls.
Multiple vulnerabilities in Ruby allow an attacker to perform a denial of service and bypass security controls.
Synacor Zimbra is vulnerable to multiple vulnerabilities allowing cross-site scripting, security-control bypass, code execution, data manipulation, a…
InetUtils allows remote code execution and denial-of-service via a vulnerability.
ImageMagick vulnerabilities allow bypass of security controls, data manipulation, disclosure, and denial of service.
An authenticated remote attacker can exploit multiple vulnerabilities in Budibase to disclose information and gain elevated privileges.
IBM Guardium Data Protection is vulnerable to privilege escalation and arbitrary code execution via authenticated access due to CVE-2026-85542.
Flowise contains 6 vulnerabilities, 2 critical and 4 high severity, with PoC available for exploitation.
Zammad contains 30 vulnerabilities, including 1 critical and 10 high-severity issues.
Multiple vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway allow remote attackers to execute code, cause denial of service, manipu…
Ghostscript allows remote code execution and data manipulation via an unspecified vulnerability.
GIMP allows remote code execution and denial of service via a vulnerability.
Unbound is vulnerable to remote attacks that can bypass security controls, corrupt memory, cause denial of service, or allow code execution.
Local attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to execute arbitrary code, including code with root privileges, bypas…
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow an attacker to escalate privileges, bypass security controls, disclos…
GIMP Plugins contain vulnerabilities that allow local code execution and denial of service.
Multiple vulnerabilities in vllm allow an attacker to bypass security controls, manipulate data, disclose sensitive information, or cause a denial of…
Multiple vulnerabilities in Flowise allow an attacker to escalate privileges, compromise user accounts, bypass security controls, and manipulate or d…
Multiple vulnerabilities in Apache ActiveMQ Artemis allow an attacker to bypass security controls, compromise authenticated sessions, manipulate or d…
Multiple vulnerabilities in Netty allow a remote attacker to cause denial-of-service, bypass security controls, perform request/response smuggling, a…
A remote attacker can execute arbitrary code or disclose sensitive information via multiple vulnerabilities in VLC.
An authenticated remote attacker can cause a denial of service in libxml2.
A remote attacker can bypass security controls or cause a denial of service in Red Hat Enterprise Linux.
Red Hat Directory Server und Enterprise Linux haben mehrere Schwachstellen, die zu Codeausführung, Administratorrechten, Datenmanipulation und Denial…
Multiple vulnerabilities in libxml2 allow an attacker to bypass security controls, manipulate or disclose data, and cause denial of service.
Remote authenticated attacker can exploit multiple vulnerabilities in Froxlor to gain administrator rights, manipulate or disclose data, and bypass s…
Multiple vulnerabilities in ImageMagick allow Denial of Service attacks.
Zimbra Collaboration Suite contains critical vulnerabilities that could allow remote code execution.
Elasticsearch is vulnerable to Denial of Service attacks via multiple vulnerabilities.
Multiple vulnerabilities in Kibana allow an attacker to bypass security controls, disclose information, manipulate data, escalate privileges, and cau…
Multiple vulnerabilities in PHP allow an attacker to cause a denial of service, disclose information, or compromise integrity.
Multiple vulnerabilities in Google Chrome and Microsoft Edge allow an attacker to potentially execute arbitrary code, bypass security controls, discl…
Multiple vulnerabilities in vllm allow data manipulation.
Local attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to manipulate files.
A remote attacker can exploit multiple vulnerabilities in poppler to perform unspecified attacks.
A remote authenticated attacker can cause a denial of service in vllm.
Attackers can exploit multiple vulnerabilities in Fleet to perform SQL injection, execute arbitrary code, manipulate data, or disclose confidential i…
OpenClaw contains multiple vulnerabilities that allow attackers to gain elevated privileges, execute arbitrary code, bypass security controls, disclo…
Budibase is vulnerable to multiple vulnerabilities allowing privilege escalation, security-control bypass, SQL injection, data manipulation, and disc…
An authenticated remote attacker can bypass security controls in Kyverno to perform SSRF, disclose sensitive information, manipulate data, and escala…