Vulnerability Report Archives • Page 20 of 119 • Daily CyberSecurity

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-19598 is a CVSS 9.8 privilege escalation flaw in the Pods WordPress plugin. It lets unauthenticated...

CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts Apache CloudStack CVE-2026-50112 remote code execution vulnerability on KVM hypervisor host security release advisory

Apache CloudStack CVE-2026-50112 remote code execution vulnerability on KVM hypervisor host security release advisory

CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts

Do Son August 21, 2026

TL;DR Apache CloudStack shipped releases 4.20.3.1 and 4.22.1.1. They fix 20 CVEs across the platform. The most...

IBM AIX Vulnerabilities: Remote Code Execution Flaws Hit CVSS 9.9 IBM AIX vulnerabilities remote code execution CVSS 9.9 security patch chart

IBM AIX Vulnerabilities: Remote Code Execution Flaws Hit CVSS 9.9

Do Son August 21, 2026

TL;DR IBM patched a large batch of IBM AIX vulnerabilities on August 15, 2026. Many allow remote...

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code

Do Son August 21, 2026

TL;DR A uutils coreutils vulnerability affects the stdbuf tool in the Rust rewrite of GNU coreutils. By...

RDK-B WebUI Vulnerabilities Let Attackers Bypass Login RDK-B WebUI vulnerabilities authentication bypass CVE-2026-19505 broadband gateway diagram

RDK-B WebUI vulnerabilities authentication bypass CVE-2026-19505 broadband gateway diagram

RDK-B WebUI Vulnerabilities Let Attackers Bypass Login

Do Son August 21, 2026

TL;DR CERT/CC disclosed five RDK-B WebUI vulnerabilities on August 19, 2026. The worst flaw lets a remote,...

CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak Keycloak account takeover CVE-2026-18963 unauthenticated password reset flaw diagram

Keycloak account takeover CVE-2026-18963 unauthenticated password reset flaw diagram

CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak

Do Son August 21, 2026

TL;DR Keycloak 26.7.2 fixes five flaws, released on August 19, 2026. The most severe, CVE-2026-18963, allows a...

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA

Do Son August 21, 2026

TL;DR Red Hat disclosed three high-severity flaws that enable privilege escalation. The worst, CVE-2026-67567 (CVSS 9.9), hits...

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites

Do Son August 21, 2026

TL;DR CVE-2026-32475 is a CVSS 9.8 unauthenticated arbitrary file upload flaw in Elementor Pro. It affects an...

CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild SPIP CVE-2026-77647 unauthenticated remote code execution vulnerability exploited in the wild patch 4.4.20

SPIP CVE-2026-77647 unauthenticated remote code execution vulnerability exploited in the wild patch 4.4.20

CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-77647 is a CVSS 9.8 unauthenticated remote code execution flaw in the SPIP CMS. It affects...

CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways TP-Link Omada gateway CVE-2026-19586 pre-authentication OS command injection vulnerability advisory OpenVPN Server

TP-Link Omada gateway CVE-2026-19586 pre-authentication OS command injection vulnerability advisory OpenVPN Server

CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways

Do Son August 21, 2026

TL;DR TP-Link patched three Omada gateway vulnerabilities. The most severe, CVE-2026-19586, is a pre-authentication OS command injection...

CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw Microsoft Entra ID remote code execution vulnerability CVE-2026-69836 CVSS 10 exploited in the wild advisory

Microsoft Entra ID remote code execution vulnerability CVE-2026-69836 CVSS 10 exploited in the wild advisory

CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw

Do Son August 21, 2026

Update: Microsoft updated its safety alert on August 21, 2026. Initially, the report marked the bug as...

CVE-2026-59270: Spring Security LDAP Flaw Lets Attackers Read or Modify Directory Entries Spring Security vulnerabilities advisory showing CVE-2026-59270 embedded LDAP flaw exposing in-memory directory entries

Spring Security vulnerabilities advisory showing CVE-2026-59270 embedded LDAP flaw exposing in-memory directory entries

CVE-2026-59270: Spring Security LDAP Flaw Lets Attackers Read or Modify Directory Entries

Do Son August 21, 2026

TL;DR VMware disclosed four Spring Security vulnerabilities. The most severe, CVE-2026-59270, rates CVSS 9.4 (CRITICAL). Its embedded...

CVE-2026-77176: Kata Containers Flaw Mounts Arbitrary Guest Rootfs Paths CVE-2026-77176 Kata Containers genpolicy vulnerability mounting arbitrary guest rootfs paths in Confidential Containers

CVE-2026-77176 Kata Containers genpolicy vulnerability mounting arbitrary guest rootfs paths in Confidential Containers

CVE-2026-77176: Kata Containers Flaw Mounts Arbitrary Guest Rootfs Paths

Do Son August 21, 2026

TL;DR CVE-2026-77176 is a CVSS 8.1 flaw in Kata Containers genpolicy. A malicious operator can mount arbitrary...

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation

Do Son August 21, 2026

TL;DR A researcher published proof-of-concept exploit code for CVE-2026-52929, a Linux kernel SCTP flaw rated CVSS 7.5....

Spring GraphQL vulnerabilities security advisory dashboard showing CVE-2026-59285 remote code execution

Spring GraphQL Vulnerabilities: Seven Flaws Patched, One Enables RCE

Do Son August 20, 2026

TL;DR VMware disclosed seven Spring GraphQL vulnerabilities and related Spring Cloud flaws on August 20, 2026. All...

CVE-2026-72529 and CVE-2026-72530 Exploited in the Wild: TrueConf Server Under Attack TrueConf Server vulnerabilities CVE-2026-72529 CVE-2026-72530 exploited in the wild delivering PhantomCore malware advisory

TrueConf Server vulnerabilities CVE-2026-72529 CVE-2026-72530 exploited in the wild delivering PhantomCore malware advisory

CVE-2026-72529 and CVE-2026-72530 Exploited in the Wild: TrueConf Server Under Attack

Do Son August 20, 2026

TL;DR CISA added two TrueConf Server flaws to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-72529 and...

CVE-2026-76017: Critical Use-After-Free in Chrome Headlines 7 Security Fixes Chrome use-after-free vulnerability CVE-2026-76017 critical Chromoting flaw among 7 security fixes advisory

Chrome use-after-free vulnerability CVE-2026-76017 critical Chromoting flaw among 7 security fixes advisory

CVE-2026-76017: Critical Use-After-Free in Chrome Headlines 7 Security Fixes

Do Son August 20, 2026

TL;DR Google shipped a Chrome Stable channel update with seven security fixes. The most severe, CVE-2026-76017, is...

Spring Integration Vulnerabilities Demand Immediate Action Diagram illustrating Spring Integration vulnerabilities CVE-2026-59307 and CVE-2026-59324

Diagram illustrating Spring Integration vulnerabilities CVE-2026-59307 and CVE-2026-59324

Spring Integration Vulnerabilities Demand Immediate Action

Do Son August 20, 2026

Two high-severity Spring Integration vulnerabilities threaten application security. Specifically, CVE-2026-59307 allows remote code execution via a deserialization...

CVE-2026-14950 (CVSS 9.8): Frauscher FDS102 Flaw Enables Unauthorized Continued Access Frauscher FDS102 vulnerabilities CVE-2026-14950 unauthorized continued access railway diagram

Frauscher FDS102 vulnerabilities CVE-2026-14950 unauthorized continued access railway diagram

CVE-2026-14950 (CVSS 9.8): Frauscher FDS102 Flaw Enables Unauthorized Continued Access

Do Son August 20, 2026

TL;DR Frauscher patched eight flaws in its FDS102 railway diagnostic system on August 20, 2026. The most...

CVE-2026-63038: Apache InLong SQL Injection Flaw Patched in 2.4.0 Apache InLong SQL injection CVE-2026-63038 path traversal SSRF vulnerability diagram

Apache InLong SQL injection CVE-2026-63038 path traversal SSRF vulnerability diagram

CVE-2026-63038: Apache InLong SQL Injection Flaw Patched in 2.4.0

Do Son August 20, 2026

TL;DR Apache InLong patched three flaws in version 2.4.0. The most notable is an Apache InLong SQL...

CVE-2026-67271 (CVSS 9.8): Unauth RCE in Dell PowerStore Dell PowerStore vulnerability CVE-2026-67271 CVSS 9.8 unauthenticated remote code execution SMB packet diagram

Dell PowerStore vulnerability CVE-2026-67271 CVSS 9.8 unauthenticated remote code execution SMB packet diagram

CVE-2026-67271 (CVSS 9.8): Unauth RCE in Dell PowerStore

Do Son August 20, 2026

TL;DR Dell patched three flaws in its PowerStore T storage family. The most severe, CVE-2026-67271, scores a...

CVE-2026-47686 (CVSS 9.9): PoC Hijacks Host via vm2 Escape vm2 sandbox escape CVE-2026-47686 CVSS 9.9 proof-of-concept exploit hijacks the host via Error.cause

vm2 sandbox escape CVE-2026-47686 CVSS 9.9 proof-of-concept exploit hijacks the host via Error.cause

CVE-2026-47686 (CVSS 9.9): PoC Hijacks Host via vm2 Escape

Do Son August 20, 2026

TL;DR The maintainers of vm2 patched three critical flaws on August 17, 2026. The most severe, CVE-2026-47686,...