Newly published CVEs, zero-days, security advisories and concrete steps to mitigate or patch.
Discover technical details about CVE-2026-58879, a critical CVSS 8.4 vulnerability involving out-of-bounds writes and local privilege escalation.
Analyze CVE-2026-58979, a critical CVSS 8.4 permission bypass vulnerability in Android PresentationController.java enabling local privilege escalation.
Discover CVE-2026-95731, a critical CVSS 9.8 vulnerability in HPE Networking Fabric Composer caused by hardcoded passwords.
Discover details about CVE-2026-115231, a high-severity memory corruption vulnerability in Eclipse ThreadX affecting module communication.
Analizamos la vulnerabilidad CVE-2026-108047 en Alosuite con CVSS 8.6, un fallo crítico de autorización que permite la escalada de privilegios administrativos.
Discover CVE-2026-119675, an 8.6 CVSS vulnerability in MongoDB Database Tools mongorestore allowing unauthorized root account creation.
Analyze CVE-2026-115215, a CVSS 8.7 vulnerability in Eclipse ThreadX NetX Duo affecting DTLS session pools and causing denial of service.
Discover CVE-2026-103916, a critical CVSS 8.4 vulnerability in Docker Sandboxes sbx cp allowing unauthorized host file read and write operations.
Discover CVE-2026-120091, a critical 8.7 CVSS vulnerability in Temporal Server affecting Kubernetes worker controller configurations.
Discover CVE-2026-63395, a critical CVSS 8.8 vulnerability in isomorphic-git prior to 1.38.6 allowing arbitrary file writes via symlinks.
Discover critical CVE-2026-63471 in fastapi-code-generator. Learn how unescaped OpenAPI paths enable code injection and how version 0.8.1 fixes it.
Critical CVE-2026-89293 vulnerability in Eclipse Mnestix Browser CVSS 8.8 allows unauthenticated actions. Learn mitigation steps and impact.
Discover CVE-2026-119922, a CVSS 8.8 privilege escalation vulnerability in Babelfish for PostgreSQL. Learn affected versions and mitigation steps.
Discover CVE-2026-89292, a critical CVSS 9.2 vulnerability in Eclipse Mnestix Browser that exposes API keys. Learn affected versions and mitigation steps.
Discover CVE-2026-112917, a critical CVSS 9.2 vulnerability in Docker Desktop for Windows and WSL2 allowing unprivileged container escapes.
Discover CVE-2026-44267, a critical 9.8 CVSS remote code execution vulnerability in Elo expression language prior to version 1.0.1.
Critical command injection vulnerability CVE-2026-28336 in SolarWinds Dameware with CVSS 9.9. Learn impacts and mitigation steps.
Discover details about CVE-2026-119977, a critical TOCTOU race condition vulnerability in WordPress Core currently under active exploitation.
Discover CVE-2026-97718, a critical CVSS 9.4 cross-site request forgery vulnerability in Secure Access server version 14.60 enabling admin account creation.
Discover CVE-2026-106803, a critical CVSS 9.8 stack-based buffer overflow in Kamailio v6.1.3 and v6.1.4 affecting the ims_registrar_pcscf module.
Discover details about CVE-2026-120065, a CVSS 7.1 vulnerability in PostgreSQL psqlODBC affecting updatable cursors and positioned queries.
Discover CVE-2026-115653, a CVSS 7.0 privilege escalation vulnerability in Eclipse ThreadX for Cortex-M architectures affecting versions 6.0.1 to 6.5.2.202603.
Discover CVE-2026-120429, a CVSS 7.1 authorization flaw in Camaleon CMS before 2.9.2 that exposes media and private files to low-privileged users.
Discover CVE-2026-120487, a high-severity CVSS 7.2 authorization flaw in LaraDashboard before 1.4.5. Learn how it affects upgrades and how to patch.
Discover details about CVE-2026-120342, a high-severity SQL injection vulnerability in mathurvishal CloudClassroom-PHP-Project with public exploits.
Discover details about CVE-2026-91898, a CVSS 8.1 vulnerability in Dell Alienware Command Center allowing arbitrary code execution and elevation of privilege.
Analyze CVE-2026-59044, an 8.4 CVSS use-after-free vulnerability causing local privilege escalation without user interaction.
Discover CVE-2026-88810, a CVSS 7.2 privilege escalation vulnerability in Rancher Manager RBAC affecting downstream clusters and specific SUSE versions.
Ubuntu leaves 22.04, 24.04, and 26.04 LTS unpatched for three weeks against the critical CVSS 9.8 zero-day CVE-2026-98432.
Discover details about CVE-2026-120337, a CVSS 7.3 vulnerability in VStarcam O-KAM SuperIPCam affecting P2P session teardown.
Discover technical details about CVE-2026-120349, a high severity code injection flaw affecting dayrui XunRuiCMS up to version 4.7.4.
Discover CVE-2026-120314, a CVSS 7.3 missing authentication vulnerability in Network-AI affecting versions 5.14.0 before 5.15.5. Learn how to mitigate it.
Analizamos CVE-2026-20549, una vulnerabilidad de módem con CVSS 7.5 que permite escalada remota de privilegios mediante estaciones base falsas.
Analyze CVE-2026-59028, a critical Android vulnerability with CVSS 8.4 caused by a confused deputy flaw leading to local privilege escalation.
Discover CVE-2026-120313, a high-severity CVSS 7.5 path traversal vulnerability in Network-AI InputSanitizer. Learn how to mitigate it.
Discover details about CVE-2026-120459, a critical authentication bypass vulnerability in python-jose through 3.5.0 involving empty HMAC secrets.
Discover CVE-2026-20585, a CVSS 7.5 modem vulnerability causing out-of-bounds writes via rogue base stations. Learn mitigation steps and patch details.
Discover details about CVE-2026-119731, a CVSS 7.5 payment bypass vulnerability in Munshi webhooks allowing unauthorized subscription activations.
Discover CVE-2026-120596, a CVSS 7.5 denial-of-service vulnerability in Nut/OS caused by an infinite loop in the TCP options parser.
Discover CVE-2026-120426, a CVSS 7.5 authorization bypass vulnerability in OpenCSG CSGHub through v2.6.0-ce exposing private repository files.