Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
CVE-2026-86950 allows remote code execution on Apple iOS, iPadOS, macOS Tahoe, and macOS Sequoia systems.
Multiple vulnerabilities in Apple iOS, iPadOS, macOS Tahoe, macOS Golden Gate, macOS Sequoia, and Safari allow code execution with root or kernel pri…
Hitachi Energy RTU500 series CMU firmware prior to 12.7.8 or 13.9.1 contains vulnerabilities.
TeamViewer Full Client and Host are affected by multiple vulnerabilities requiring updates.
Mozilla Firefox and Firefox ESR versions prior to specified releases contain vulnerabilities that could allow code execution.
Multiple vulnerabilities, including one critical and 39 high-severity, affect Firefox and Firefox ESR, allowing code execution and information disclo…
Rancher prior to 0.12.19 and other versions has vulnerabilities leading to stored cross-site scripting and cross-namespace writes.
Proof of Concept code is available for exploiting 7 high-severity vulnerabilities in the axios product.
FreePBX components prior to specified versions have vulnerabilities that could allow information disclosure.
Three vulnerabilities, including two high-severity ones, affect HPE Networking EdgeConnect SD-WAN Gateways and Orchestrator, allowing potential infor…
HPE OneView e HPE Synergy Composer hanno 3 vulnerabilità, 2 con gravità "alta".
WatchGuard AP prior to 3.4.8 has vulnerabilities allowing unauthenticated access and command execution via API and CLI.
Apple's iOS, iPadOS, macOS, watchOS, and visionOS versions prior to specified updates contain a vulnerability that may allow exploitation, as indicat…
JFrog Artifactory is vulnerable to remote unauthenticated access control bypass leading to administrative privilege escalation via CVE-2026-82329.
A local attacker can exploit a vulnerability in Zabbix to disclose information.
A vulnerability in DENX U-Boot allows code execution via a neighbor network attacker.
Multiple vulnerabilities in Apache Airflow Providers allow an attacker to manipulate files, perform SQL injection, disclose information, and bypass s…
Remote authenticated attacker can exploit multiple vulnerabilities in Froxlor to perform cross-site scripting, disclose confidential information, man…
A local attacker can exploit a vulnerability in Ghostscript to escalate privileges.
A remote attacker can cause a denial of service in FasterXML Jackson Databind.
Remote attackers can execute arbitrary code and bypass security controls in Node.js.
A remote attacker can cause a denial of service and data manipulation in Red Hat Enterprise Linux (cjose).
Multiple vulnerabilities in WebKitGTK allow an attacker to execute arbitrary code, bypass security measures, disclose sensitive information, manipula…
Local attacker can exploit multiple vulnerabilities in Wind River VxWorks to cause denial of service, execute arbitrary code, and disclose or manipul…
A remote attacker can cause a Denial of Service in Red Hat Enterprise Linux (rhc).
FreeRDP is vulnerable to remote attacks that may cause denial-of-service, allow code execution, data manipulation, or information disclosure.
Multiple vulnerabilities in IBM DataPower Gateway allow an attacker to execute arbitrary code, escalate privileges, bypass security controls, manipul…
Remote attackers can cause denial of service and execute arbitrary code via multiple vulnerabilities in Wireshark.
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow attackers to escalate privileges, bypass security controls, disclose …
Multiple vulnerabilities in Mozilla Firefox and Thunderbird allow code execution and bypass security controls.
Multiple vulnerabilities in FreeRDP allow an attacker to execute arbitrary code, bypass security controls, disclose sensitive information, manipulate…
OpenSSH is vulnerable to multiple vulnerabilities allowing denial of service, information disclosure, file manipulation, and security-control bypass.
FreeRDP contains multiple vulnerabilities that allow code execution, denial of service, and information disclosure.
Remote attackers can exploit multiple vulnerabilities in FreeRDP to execute arbitrary code, cause denial of service, manipulate data, or disclose con…
FreePBX has multiple high-severity vulnerabilities in its modules that could allow code execution.
Progress Telerik Fiddler Everywhere contains two vulnerabilities, one with high severity.
WatchGuard AP is vulnerable to authentication bypass and arbitrary code execution via three vulnerabilities.