Swati KhandelwalJul 29, 2026Vulnerability / Software Security Ruby on Rails has released fixes for a critical Active Storage vulnerability that […]
Category: Critical
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws […]
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
Ravie LakshmananJul 28, 2026Vulnerability / Enterprise Security JetBrains is urging customers of on-premise versions of TeamCity to update to the […]
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
Ravie LakshmananJul 21, 2026Vulnerability / Web Security A third SharePoint Server flaw patched by Microsoft as part of its Patch […]
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
Ravie LakshmananJul 21, 2026Vulnerability / Artificial Intelligence Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow […]
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow […]
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
Ravie LakshmananJul 11, 2026Vulnerability / Email Security Zimbra is urging customers to apply updates to address a critical security vulnerability […]
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Swati KhandelwalJul 01, 2026AI Coding / Vulnerability Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking […]
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Ravie LakshmananJun 13, 2026Vulnerability / Enterprise Software Splunk has released security updates to address a critical security flaw in Splunk […]
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Ravie LakshmananJun 08, 2026Vulnerability / Network Security Check Point has warned of active exploitation of a critical vulnerability impacting Remote […]