#vulnerabilidad
Latest news about Vulnerabilidad: context, sources and what to do.
54 articles
Discover technical details about CVE-2026-58879, a critical CVSS 8.4 vulnerability involving out-of-bounds writes and local privilege escalation.
Analyze CVE-2026-58979, a critical CVSS 8.4 permission bypass vulnerability in Android PresentationController.java enabling local privilege escalation.
Discover CVE-2026-95731, a critical CVSS 9.8 vulnerability in HPE Networking Fabric Composer caused by hardcoded passwords.
Analizamos la vulnerabilidad CVE-2026-108047 en Alosuite con CVSS 8.6, un fallo crítico de autorización que permite la escalada de privilegios administrativos.
Discover CVE-2026-119675, an 8.6 CVSS vulnerability in MongoDB Database Tools mongorestore allowing unauthorized root account creation.
Discover CVE-2026-103916, a critical CVSS 8.4 vulnerability in Docker Sandboxes sbx cp allowing unauthorized host file read and write operations.
Discover CVE-2026-120091, a critical 8.7 CVSS vulnerability in Temporal Server affecting Kubernetes worker controller configurations.
Critical CVE-2026-89293 vulnerability in Eclipse Mnestix Browser CVSS 8.8 allows unauthenticated actions. Learn mitigation steps and impact.
Discover CVE-2026-119922, a CVSS 8.8 privilege escalation vulnerability in Babelfish for PostgreSQL. Learn affected versions and mitigation steps.
Discover CVE-2026-89292, a critical CVSS 9.2 vulnerability in Eclipse Mnestix Browser that exposes API keys. Learn affected versions and mitigation steps.
Critical command injection vulnerability CVE-2026-28336 in SolarWinds Dameware with CVSS 9.9. Learn impacts and mitigation steps.
Discover details about CVE-2026-119977, a critical TOCTOU race condition vulnerability in WordPress Core currently under active exploitation.
Discover CVE-2026-97718, a critical CVSS 9.4 cross-site request forgery vulnerability in Secure Access server version 14.60 enabling admin account creation.
Discover CVE-2026-120487, a high-severity CVSS 7.2 authorization flaw in LaraDashboard before 1.4.5. Learn how it affects upgrades and how to patch.
Discover details about CVE-2026-91898, a CVSS 8.1 vulnerability in Dell Alienware Command Center allowing arbitrary code execution and elevation of privilege.
Analyze CVE-2026-59044, an 8.4 CVSS use-after-free vulnerability causing local privilege escalation without user interaction.
Ubuntu leaves 22.04, 24.04, and 26.04 LTS unpatched for three weeks against the critical CVSS 9.8 zero-day CVE-2026-98432.
Discover details about CVE-2026-120337, a CVSS 7.3 vulnerability in VStarcam O-KAM SuperIPCam affecting P2P session teardown.
Analizamos CVE-2026-20549, una vulnerabilidad de módem con CVSS 7.5 que permite escalada remota de privilegios mediante estaciones base falsas.
Analyze CVE-2026-59028, a critical Android vulnerability with CVSS 8.4 caused by a confused deputy flaw leading to local privilege escalation.
Discover CVE-2026-120313, a high-severity CVSS 7.5 path traversal vulnerability in Network-AI InputSanitizer. Learn how to mitigate it.
Discover details about CVE-2026-120459, a critical authentication bypass vulnerability in python-jose through 3.5.0 involving empty HMAC secrets.
Discover CVE-2026-20585, a CVSS 7.5 modem vulnerability causing out-of-bounds writes via rogue base stations. Learn mitigation steps and patch details.
Discover details about CVE-2026-119731, a CVSS 7.5 payment bypass vulnerability in Munshi webhooks allowing unauthorized subscription activations.
Discover CVE-2026-120426, a CVSS 7.5 authorization bypass vulnerability in OpenCSG CSGHub through v2.6.0-ce exposing private repository files.
Discover details about CVE-2026-106808, a stack-based buffer overflow in OpenAirInterface Core Network v2.2.1 UDM component with a CVSS score of 7.5.
Discover critical CVE-2026-120064 in psqlODBC with CVSS 7.5. Learn how untrusted column indices cause out-of-bounds errors and how to patch it.
Discover CVE-2026-92886, a CVSS 7.8 Missing Authorization vulnerability in TÜBİTAK BİLGEM eta-register affecting versions 2.0.8 before 2.0.9.
Discover CVE-2026-81938, a high-severity CVSS 7.7 vulnerability in Grafana Mimir allowing local file reading through Alertmanager configurations.
Discover details about CVE-2026-77879, a CVSS 7.7 SQL injection vulnerability in Control Web Panel affecting versions prior to 1.16.
Discover technical details about CVE-2026-20559, a CVSS 7.8 use-after-free vulnerability in the Android GPU pdma driver leading to privilege escalation.
Discover CVE-2026-120436, a CVSS 7.8 integer and heap buffer overflow vulnerability in Netpbm affecting multiple versions.
Discover details about CVE-2026-120438, a high-severity heap buffer overflow in QuickJS-NG before 0.16.0 affecting 32-bit hosts. Learn mitigation steps.
Discover technical details about CVE-2026-99227, a CVSS 7.8 vulnerability in the Linux kernel io_uring/waitid subsystem, and learn how to mitigate it.
Discover CVE-2026-58836, a high-severity CVSS 7.8 vulnerability in Android's InstallPackageHelper.java allowing Enhanced Confirmation Mode bypass.
Analyze CVE-2026-59000, a CVSS 8.4 vulnerability causing local privilege escalation and permission bypass via a confused deputy.
Discover CVE-2026-120448, a CVSS 8.1 mass assignment vulnerability in DoraCMS up to 3.1.0 allowing low-privileged API key hijacking.
Discover CVE-2026-58984, a high severity memory corruption vulnerability due to a use-after-free with a CVSS score of 8.4 and local escalation risks.
Discover details about CVE-2026-120447, a high-severity authentication bypass vulnerability in HotGo versions 2.8.4 through 2.15.1 allowing account takeover.
Discover details about CVE-2026-94349, an OS command injection vulnerability affecting Dell OpenManage Enterprise versions prior to 4.8.0.
Discover CVE-2026-58965, an 8.4 CVSS permission bypass vulnerability in Android MusicFxHelper.java leading to local privilege escalation.
Discover CVE-2026-104080, an 8.4 CVSS OS command injection vulnerability in Control Web Panel affecting versions before 1.30. Learn how to mitigate.
Discover technical details about CVE-2026-109140 in Krill, where a nonce generation flaw puts login sessions at risk after restarts.
Analyze CVE-2026-49922, a critical 8.4 CVSS privilege escalation vulnerability in Android affecting ConnectionServiceWrapper.java.
Discover CVE-2026-77878, an 8.4 CVSS OS command injection vulnerability in Control Web Panel before version 1.30 affecting database restoration routes.
Discover CVE-2026-58957, a critical CVSS 8.4 vulnerability in ActivityStarter.java enabling local privilege escalation without user interaction.
Analyze CVE-2026-58837, a CVSS 8.4 vulnerability causing local privilege escalation via background activity launch without user interaction.
Explore CVE-2026-58946, a critical CVSS 8.4 permission bypass vulnerability in ActivityClientController.java leading to local privilege escalation.
Discover CVE-2026-120315, a critical CVSS 8.8 path traversal vulnerability in LobeHub Chat versions 1.84.26 to 2.1.48. Learn how to mitigate the flaw.
Discover details about CVE-2026-18199, a CVSS 8.8 remote code execution vulnerability in ManageEngine Password Manager Pro and PAM360.
Critical CVE-2026-73696 vulnerability in Control Web Panel prior to 1.12 allows unauthenticated attackers to bypass authentication via missing exit calls.
Critical authentication bypass CVE-2026-116606 (CVSS 9.3) in Barracuda Email Security Gateway lets unauthenticated attackers alter global configuration.
Critical SQL injection vulnerability in on-premise Arista VeloCloud Orchestrator with CVSS 9.9 is actively exploited. Learn how to mitigate it.
We analyze the critical CVE-2026-115905 vulnerability with a 10.0 CVSS score in the Rust zip library and how to update to version 9.0.5.