#cve
Latest news about CVE: context, sources and what to do.
60 articles
Discover technical details about CVE-2026-58879, a critical CVSS 8.4 vulnerability involving out-of-bounds writes and local privilege escalation.
Analyze CVE-2026-58979, a critical CVSS 8.4 permission bypass vulnerability in Android PresentationController.java enabling local privilege escalation.
Discover CVE-2026-95731, a critical CVSS 9.8 vulnerability in HPE Networking Fabric Composer caused by hardcoded passwords.
Discover details about CVE-2026-115231, a high-severity memory corruption vulnerability in Eclipse ThreadX affecting module communication.
Analizamos la vulnerabilidad CVE-2026-108047 en Alosuite con CVSS 8.6, un fallo crítico de autorización que permite la escalada de privilegios administrativos.
Discover CVE-2026-119675, an 8.6 CVSS vulnerability in MongoDB Database Tools mongorestore allowing unauthorized root account creation.
Discover how a developer reverse-engineered a 2014 Renault Latitude TomTom navigation system firmware just to fix the dashboard clock time.
Analyze CVE-2026-115215, a CVSS 8.7 vulnerability in Eclipse ThreadX NetX Duo affecting DTLS session pools and causing denial of service.
Discover CVE-2026-103916, a critical CVSS 8.4 vulnerability in Docker Sandboxes sbx cp allowing unauthorized host file read and write operations.
Encrypted firmware on Nvidia RTX Spark laptops restricts GPU clock speeds to 780 MHz on Linux, impacting AI inference performance.
Discover CVE-2026-120091, a critical 8.7 CVSS vulnerability in Temporal Server affecting Kubernetes worker controller configurations.
Discover CVE-2026-63395, a critical CVSS 8.8 vulnerability in isomorphic-git prior to 1.38.6 allowing arbitrary file writes via symlinks.
Discover critical CVE-2026-63471 in fastapi-code-generator. Learn how unescaped OpenAPI paths enable code injection and how version 0.8.1 fixes it.
Critical CVE-2026-89293 vulnerability in Eclipse Mnestix Browser CVSS 8.8 allows unauthenticated actions. Learn mitigation steps and impact.
Discover rustup 1.29.3, the latest patch release fixing CPU instruction errors and Solaris issues. Learn how to update safely.
Solves: Gestor de herramientas oficial para instalar y administrar versiones del lenguaje Rust.
Discover CVE-2026-119922, a CVSS 8.8 privilege escalation vulnerability in Babelfish for PostgreSQL. Learn affected versions and mitigation steps.
Discover StateBench, a new benchmark evaluating how language models track state changes across long documents using four algebraic difficulty levels.
Discover CVE-2026-89292, a critical CVSS 9.2 vulnerability in Eclipse Mnestix Browser that exposes API keys. Learn affected versions and mitigation steps.
El borrador de C++26 ha sido rechazado en la votación DIS de la ISO debido a desacuerdos sobre los contratos, generando un bloqueo histórico sin precedentes.
Discover CVE-2026-112917, a critical CVSS 9.2 vulnerability in Docker Desktop for Windows and WSL2 allowing unprivileged container escapes.
Discover CVE-2026-44267, a critical 9.8 CVSS remote code execution vulnerability in Elo expression language prior to version 1.0.1.
Critical command injection vulnerability CVE-2026-28336 in SolarWinds Dameware with CVSS 9.9. Learn impacts and mitigation steps.
Postman desktop application silently installs AI plugins for coding agents like Codex and Claude Code, raising serious user consent and security concerns.
Discover details about CVE-2026-119977, a critical TOCTOU race condition vulnerability in WordPress Core currently under active exploitation.
Discover CVE-2026-97718, a critical CVSS 9.4 cross-site request forgery vulnerability in Secure Access server version 14.60 enabling admin account creation.
An historical analysis on how a modern chess engine running on a vintage 1996 Pentium Pro could have easily defeated Garry Kasparov.
Discover CVE-2026-106803, a critical CVSS 9.8 stack-based buffer overflow in Kamailio v6.1.3 and v6.1.4 affecting the ims_registrar_pcscf module.
Discover details about CVE-2026-120065, a CVSS 7.1 vulnerability in PostgreSQL psqlODBC affecting updatable cursors and positioned queries.
Discover CVE-2026-115653, a CVSS 7.0 privilege escalation vulnerability in Eclipse ThreadX for Cortex-M architectures affecting versions 6.0.1 to 6.5.2.202603.
Discover CVE-2026-120429, a CVSS 7.1 authorization flaw in Camaleon CMS before 2.9.2 that exposes media and private files to low-privileged users.
Discover CVE-2026-120487, a high-severity CVSS 7.2 authorization flaw in LaraDashboard before 1.4.5. Learn how it affects upgrades and how to patch.
Discover details about CVE-2026-120342, a high-severity SQL injection vulnerability in mathurvishal CloudClassroom-PHP-Project with public exploits.
Discover details about CVE-2026-91898, a CVSS 8.1 vulnerability in Dell Alienware Command Center allowing arbitrary code execution and elevation of privilege.
Analyze CVE-2026-59044, an 8.4 CVSS use-after-free vulnerability causing local privilege escalation without user interaction.
Discover CVE-2026-88810, a CVSS 7.2 privilege escalation vulnerability in Rancher Manager RBAC affecting downstream clusters and specific SUSE versions.
Ubuntu leaves 22.04, 24.04, and 26.04 LTS unpatched for three weeks against the critical CVSS 9.8 zero-day CVE-2026-98432.
Discover details about CVE-2026-120337, a CVSS 7.3 vulnerability in VStarcam O-KAM SuperIPCam affecting P2P session teardown.
Discover technical details about CVE-2026-120349, a high severity code injection flaw affecting dayrui XunRuiCMS up to version 4.7.4.
Discover CVE-2026-120314, a CVSS 7.3 missing authentication vulnerability in Network-AI affecting versions 5.14.0 before 5.15.5. Learn how to mitigate it.
Analizamos CVE-2026-20549, una vulnerabilidad de módem con CVSS 7.5 que permite escalada remota de privilegios mediante estaciones base falsas.
BMW announces its navigation-guided urban driver assist system starting in 2027 in Germany to compete with Tesla's FSD, utilizing existing vehicle sensors.
Analyze CVE-2026-59028, a critical Android vulnerability with CVSS 8.4 caused by a confused deputy flaw leading to local privilege escalation.
Discover CVE-2026-120313, a high-severity CVSS 7.5 path traversal vulnerability in Network-AI InputSanitizer. Learn how to mitigate it.
Ford commits to never selling customer driving data to third-party data brokers, setting a new standard following regulatory scrutiny across the auto industry.
Discover details about CVE-2026-120459, a critical authentication bypass vulnerability in python-jose through 3.5.0 involving empty HMAC secrets.
Discover CVE-2026-20585, a CVSS 7.5 modem vulnerability causing out-of-bounds writes via rogue base stations. Learn mitigation steps and patch details.
Discover details about CVE-2026-119731, a CVSS 7.5 payment bypass vulnerability in Munshi webhooks allowing unauthorized subscription activations.
Discover CVE-2026-120596, a CVSS 7.5 denial-of-service vulnerability in Nut/OS caused by an infinite loop in the TCP options parser.
Anthropic updates Claude Code's system prompt to prevent developers from using the AI tool to create direct clones of existing video games.
Discover CVE-2026-120426, a CVSS 7.5 authorization bypass vulnerability in OpenCSG CSGHub through v2.6.0-ce exposing private repository files.
Discover technical details about CVE-2026-106804, a stack-based buffer overflow in Kamailio v6.1.3 and v6.1.4 causing denial of service.
Discover details about CVE-2026-106808, a stack-based buffer overflow in OpenAirInterface Core Network v2.2.1 UDM component with a CVSS score of 7.5.
Discover critical CVE-2026-120064 in psqlODBC with CVSS 7.5. Learn how untrusted column indices cause out-of-bounds errors and how to patch it.
Discover CVE-2026-92886, a CVSS 7.8 Missing Authorization vulnerability in TÜBİTAK BİLGEM eta-register affecting versions 2.0.8 before 2.0.9.
Discover details about CVE-2026-88809, a CVSS 7.6 vulnerability in SUSE Rancher Manager meta proxy endpoint that bypasses allowlists.
Discover CVE-2026-81938, a high-severity CVSS 7.7 vulnerability in Grafana Mimir allowing local file reading through Alertmanager configurations.
Discover details about CVE-2026-77879, a CVSS 7.7 SQL injection vulnerability in Control Web Panel affecting versions prior to 1.16.
Discover technical details about CVE-2026-20559, a CVSS 7.8 use-after-free vulnerability in the Android GPU pdma driver leading to privilege escalation.
Discover CVE-2026-120436, a CVSS 7.8 integer and heap buffer overflow vulnerability in Netpbm affecting multiple versions.
Discover details about CVE-2026-120438, a high-severity heap buffer overflow in QuickJS-NG before 0.16.0 affecting 32-bit hosts. Learn mitigation steps.