Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
Multiple vulnerabilities in Apache HTTP Server allow an attacker to execute arbitrary code, bypass authentication, disclose confidential information,…
Apache HTTP Server contains multiple vulnerabilities, including 3 critical and 13 high-severity issues.
Moxa protocol gateways contain vulnerabilities that could allow information disclosure.
GitLab AI Gateway versions prior to 19.2.4, 19.3.2, and 19.4.1 contain a vulnerability.
Hitachi Coding Software Suite prior to V4.0.0 contains vulnerabilities that could allow information disclosure.
This advisory provides an overview of relevant cybersecurity developments for executive decision-making.
MikroTik RouterOS prior to 7.24 is affected by a vulnerability that allows code execution via CVE-2026-84411.
Fortra BoKS Core Privileged Access Manager contains 8 vulnerabilities, including 3 critical and 3 high severity.
Fortinet FortiMail allows unauthenticated arbitrary code execution via arbitrary file writes.
Johnson Controls Easy IO FG, Easy IO Neo, EasyIO FS32 products prior to specified versions have vulnerabilities.
WatchGuard Endpoint Security Prior to 8.00.26.0012 has a vulnerability allowing arbitrary kernel memory access due to missing authentication in the d…
TP-Link security updates address 8 vulnerabilities, including 6 high-severity ones, allowing potential unauthorized access, information disclosure, a…
Tenable fixed 9 vulnerabilities, including 1 critical and 4 high severity, in Nessus.
WatchGuard Endpoint Security per Windows ha una vulnerabilità critica che consente a un utente autenticato locale di elevare privilegi e eseguire cod…
Fortinet products prior to specified versions are vulnerable to improper pathname limitation, allowing potential unauthorized access.
An authenticated remote attacker can exploit a vulnerability in OpenCTI to gain administrator privileges.
Ghostscript allows remote code execution and data manipulation via an unspecified vulnerability.
Multiple vulnerabilities in CPython allow an attacker to perform a denial of service and bypass security controls.
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux (libpcap) to disclose information and execute arbitrary code.
Local attacker can exploit multiple vulnerabilities in CUPS to escalate privileges, bypass security controls, manipulate data, and cause denial of se…
Multiple vulnerabilities in OpenBao allow an attacker to perform denial of service, bypass security controls, and disclose information.
A remote attacker can exploit a vulnerability in Python to manipulate or disclose data.
A remote attacker can exploit a vulnerability in CPython to manipulate files.
A remote attacker can exploit multiple vulnerabilities in CPython to disclose information and cause unspecified effects.
Remote attackers can bypass security controls, manipulate or disclose data, and cause denial of service in Bouncy Castle.
Red Hat OpenShift is vulnerable to remote authenticated attacker file manipulation.
Multiple vulnerabilities in Foreman allow an attacker to execute arbitrary code, bypass security controls, manipulate data, and disclose confidential…
An authenticated remote attacker can exploit a vulnerability in LiteLLM to disclose information and potentially escalate privileges.
Multiple vulnerabilities in CODESYS Control Runtime and Gateway Client allow data manipulation and denial of service.
MediaWiki vulnerabilities allow attackers to bypass security controls and disclose information.
Remote authenticated attacker can execute arbitrary code and bypass security controls in Tenable Security Nessus.
HCL BigFix allows information disclosure, data manipulation, and cross-site scripting via multiple vulnerabilities.
Multiple vulnerabilities in BigBlueButton allow an attacker to execute arbitrary code, disclose information, manipulate data, and perform cross-site …
Multiple vulnerabilities in MISP allow an attacker to gain elevated privileges, execute arbitrary code, disclose and manipulate data, or perform cros…
An authenticated remote attacker can exploit a vulnerability in Wind River VxWorks to execute arbitrary code and gain elevated privileges.
A remote anonymous attacker can exploit a vulnerability in Podman to escalate privileges.
FasterXML Jackson is vulnerable to remote denial of service attacks via multiple vulnerabilities.
Fortinet FortiMail allows remote anonymous attackers to manipulate files via a vulnerability.
Zammad is vulnerable to code execution and privilege escalation via CVE-2026-102489 and CVE-2026-102490 if exploited in sequence.
FortiMail is vulnerable to remote code execution via CVE-2026-104286.