Vulnerabilities
AWS Load Balancer Controller 3.4.2 Fixes Misordered HTTP/gRPC Route Precedence CVE
Version 3.4.2 resolves CVE-2026-15738, which allowed users to intercept traffic via misordered HTTP and gRPC routes on shared gateways.
Vulnerabilities
Vulnerabilities
Vulnerabilities
SQL Injection in CP Multi View Event Calendar Affects WordPress Sites
A high-severity SQL injection flaw in the CP Multi View Event Calendar plugin affects versions through 1.4.41, with no confirmed patch status in the record.
Vulnerabilities
Container Escape Myths: Why Standard Assumptions Fail in Production
Standard isolation mechanisms often fail because they rely on shared kernel resources that an attacker can manipulate through misconfigured mount points or privilege escalation.
Vulnerabilities
TLS Libraries Skip Name Constraint Checks in GnuTLS, wolfSSL, OpenSSL
CERT/CC details thirteen flaws where TLS libraries inconsistently enforce X.509 name constraints, allowing potential namespace bypasses.
Vulnerabilities
Amazon S3 Encryption Client for .NET Patched for RSA Padding Downgrade Flaw CVE-2026-110310
Security teams must upgrade Amazon S3 Encryption Client for .NET to patch CVE-2026-110310, which allows attackers to decrypt data via legacy padding downgrades.
Vulnerabilities
Diaple Stela Cookie Manipulation Grants Unauthenticated Super Admin Access in Pre-1.60.1 Versions
Diaple Stela versions prior to 1.60.1 contain a critical flaw allowing remote attackers to bypass login checks and gain full administrative access without credentials.
Vulnerabilities
Dokku RCE Risk: Unsafe Bash Eval in Docker Options Patched in 0.38.25
A critical flaw in Dokku versions before 0.38.25 allows remote code execution via the docker-options plugin, but a patch is now available.
Vulnerabilities
SQL Server Heap Overflow CVE-2026-68883 Lets Authenticated Attackers Escalate Privileges Remotely
Microsoft details a high-severity heap overflow in SQL Server versions up to 2022 that allows authorized attackers to elevate privileges over networks.
Vulnerabilities
SharePoint Server Access Control Bug Lets Network Attackers Escalate Privileges
Microsoft SharePoint Server Subscription Edition contains a network-accessible flaw that allows authorized attackers to gain higher privileges.
Vulnerabilities
Windows Media Video Decoder Heap Buffer Overflow CVE-2026-100220 Demands Urgent Patching for Windows 10/11 Users
A high-severity flaw in the Windows Media Video Decoder allows remote code execution. Affected Windows 10 and 11 versions require immediate updates.
Vulnerabilities
.NET WPF Integer Overflow: MS Patches Remote Priv Escalation in Desktop Runtime 8-11
Microsoft released updates for .NET Desktop Runtime to fix a network-accessible privilege escalation flaw affecting versions 8 through 11.
Vulnerabilities
.NET WPF Runtimes: Unsafe Deserialization Flaw in Versions 8-11 Patched to Stop RCE
Microsoft has released updates for .NET WPF runtimes to fix a high-severity remote code execution vulnerability caused by unsafe data deserialization.
Vulnerabilities
GlobalProtect macOS Privilege Escalation: Patch Available for Root Access Flaw
A medium-severity flaw in GlobalProtect for macOS allows local users to gain root access, but a fix is now available.
Vulnerabilities
WeGIA SQLi CVE-2026-55683: 3.8.6 Stops Remote Attackers From Manipulating Credentials and Billing Data
LabRedesCefetRJ WeGIA 3.8.6 patches a critical flaw allowing remote attackers to manipulate billing data and credentials via unsanitized inputs.
Vulnerabilities
WeGIA Critical SQL Injection CVE-2026-55684 Fixed in 3.8.6 Update for Charity Management App
LabRedesCefetRJ released version 3.8.6 to fix CVE-2026-55684, a CVSS 9.8 critical SQL injection vulnerability in the WeGIA charity management web application that allowed remote attackers to manipulate database records without authentication.
Vulnerabilities
PAN-OS Stored XSS Flaw CVE-2026-0316 Affects Firewalls and Panorama
Palo Alto Networks reports a low-severity stored cross-site scripting flaw in PAN-OS management interfaces that requires administrative access to exploit.
Vulnerabilities
Juniper Junos OS J-Web Buffer Overflow Allows Unauthenticated Remote Code Execution
A critical stack-based buffer overflow in Juniper Junos OS and Evolved httpd processes exposes virtual domains to remote code execution and denial of service.
Vulnerabilities
Juniper Junos OS Kernel Crash Vulnerability Requires Urgent Attention
An unauthenticated integer underflow flaw in Juniper Junos OS allows remote attackers to crash the kernel if Extended Echo is enabled.
Vulnerabilities
Ahsay Backup Server Patches Chained Auth Bypass and RCE Flaws Allowing Root Access
Ahsay released patches for two chained flaws in its backup server that let attackers create admin accounts and run code as root.
Vulnerabilities
webp-converter OS Command Injection Flaw Affects Versions Before 3.0.0
A critical flaw in the Node.js webp-converter library allows attackers to run system commands via crafted file names or option strings.
Vulnerabilities
transcribe2texts OS Command Injection Lets Attackers Run System Commands
Attackers can run system commands via crafted audio paths in transcribe2texts up to version 1.0.6. The NVD rates this flaw as critical.
Vulnerabilities
TR7 ASP Critical Command Injection Requires Urgent Updates for Virtual and Physical Deployments
A critical command injection vulnerability in TR7 ASP requires immediate version checks for both virtual and physical deployment models.
Vulnerabilities
.NET 8-11 Out-of-Bounds Write Flaw Enables Remote Code Execution on Windows
A high-severity out-of-bounds write flaw in .NET allows remote code execution on Windows. Patched runtimes are now available for versions 8 through 11.
Vulnerabilities
Microsoft .NET WPF RCE Flaw CVE-2026-70174 Patches XPS Link Bypass
High-severity remote code execution in .NET WPF allows attackers to run code via malicious XPS hyperlinks. Patches are available for versions 8 through 11.