Vulnerability Report Archives • Page 36 of 119 • Daily CyberSecurity

ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories ProFTPD ACL bypass vulnerability CVE-2026-35025 access control bypass in RNFR command

ProFTPD ACL bypass vulnerability CVE-2026-35025 access control bypass in RNFR command

ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories

Do Son July 1, 2026

TL;DR A new ProFTPD ACL bypass, CVE-2026-35025, scores 8.6 on CVSS. It lets a logged-in FTP user...

Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs Plone RCE vulnerability via TALES injection in the Classic portlet

Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs

Do Son July 1, 2026

TL;DR Plone patched three critical flaws across two add-on packages. The worst is a Plone RCE vulnerability...

Adobe ColdFusion vulnerabilities enabling arbitrary code execution with CVSS 10 scores (APSB26-68)

Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution

Do Son June 30, 2026

TL;DR Adobe shipped fixes for 11 Adobe ColdFusion vulnerabilities on 30 June 2026. Six earn a perfect...

Six NetScaler Vulnerabilities Allow Denial of Service and File Read NetScaler vulnerabilities causing denial of service, memory overread, and unauthenticated file read on NetScaler ADC and Gateway

NetScaler vulnerabilities causing denial of service, memory overread, and unauthenticated file read on NetScaler ADC and Gateway

Six NetScaler Vulnerabilities Allow Denial of Service and File Read

Do Son June 30, 2026

TL;DR Cloud Software Group patched six NetScaler vulnerabilities in NetScaler ADC and NetScaler Gateway. Three rate CVSS...

NLnet Labs Patches Four Critical NSD Vulnerabilities NSD DNS vulnerabilities and CVE-2026-12244

NLnet Labs Patches Four Critical NSD Vulnerabilities

Do Son June 30, 2026

TL;DR NLnet Labs recently released version 4.14.3 of the Name Server Daemon (NSD) to patch four severe...

Thousands Affected by NVIDIA 9.8 Auth Bypass NVIDIA security updates fixing CVE-2026-24270, CVE-2026-24260, and CVE-2026-24264

Thousands Affected by NVIDIA 9.8 Auth Bypass

Do Son June 30, 2026

TL;DR NVIDIA patched several severe vulnerabilities across its AI platforms. The most critical flaw is a 9.8...

WSO2 API Manager Hit by CVSS 10 Auth Bypass and Six More Flaws WSO2 API Manager vulnerabilities CVE-2026-5430 CVSS 10 JWT authentication bypass security advisory

WSO2 API Manager vulnerabilities CVE-2026-5430 CVSS 10 JWT authentication bypass security advisory

WSO2 API Manager Hit by CVSS 10 Auth Bypass and Six More Flaws

Do Son June 30, 2026

TL;DR WSO2 patched seven vulnerabilities across its API platform, including WSO2 API Manager, in June 2026. The...

Synology MailPlus Server Patched for CVSS 10 Flaw CVE-2026-13136 Synology MailPlus Server vulnerability CVE-2026-13136 CVSS 10 security advisory

Synology MailPlus Server vulnerability CVE-2026-13136 CVSS 10 security advisory

Synology MailPlus Server Patched for CVSS 10 Flaw CVE-2026-13136

Do Son June 30, 2026

TL;DR Synology fixed three vulnerabilities in Synology MailPlus Server, the email package for its NAS devices. The...

SimpleHelp Authentication Bypass Exploited in the Wild to Deploy TaskWeaver and Djinn Stealer

Do Son June 30, 2026

On 29 June 2026, CISA added CVE-2026-48558 to its Known Exploited Vulnerabilities catalog. The flaw is a...

Critical wolfSSL Security Vulnerabilities Expose IoT Systems Diagram explaining wolfSSL security vulnerabilities and X.509 trust-chain bypass.

Diagram explaining wolfSSL security vulnerabilities and X.509 trust-chain bypass.

Critical wolfSSL Security Vulnerabilities Expose IoT Systems

Do Son June 30, 2026

TL;DR Developers patched six high-severity wolfSSL security vulnerabilities in the embedded SSL library. These flaws include an...

EVoke Systems vulnerabilities and charging station security

EVoke Systems Vulnerabilities Expose Charging Stations

Do Son June 30, 2026

TL;DR Four critical security flaws currently impact all versions of the EVoke Systems Charging Station Management System....

Four Critical Cacti Vulnerabilities Fixed in 1.2.31 Cacti vulnerabilities CVE-2026-39955 CVE-2026-39938 pre-auth SQL injection LFI security update 1.2.31

Cacti vulnerabilities CVE-2026-39955 CVE-2026-39938 pre-auth SQL injection LFI security update 1.2.31

Four Critical Cacti Vulnerabilities Fixed in 1.2.31

Do Son June 30, 2026

TL;DR Cacti fixed four critical flaws in version 1.2.31. Three allow pre-authentication SQL injection, and one allows...

Public PoC and Exploit Details Released for IPV6_FRAG_ESCAPE on RHEL 10 IPV6_FRAG_ESCAPE IPv6 container escape PoC root shell on RHEL 10 and CentOS Stream 10 kernel

IPV6_FRAG_ESCAPE IPv6 container escape PoC root shell on RHEL 10 and CentOS Stream 10 kernel

Public PoC and Exploit Details Released for IPV6_FRAG_ESCAPE on RHEL 10

Do Son June 29, 2026

Security researcher Massimiliano Oldani has published IPV6_FRAG_ESCAPE, a working proof-of-concept for an IPv6 container escape on CentOS...

Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes Public Cisco Unified CM RCE flaw CVE-2026-20230 exploited in the wild with public PoC exploit code

Cisco Unified CM RCE flaw CVE-2026-20230 exploited in the wild with public PoC exploit code

Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes Public

Do Son June 29, 2026

TL;DR Attackers are exploiting a Cisco Unified CM RCE flaw in live attacks. Tracked as CVE-2026-20230, it...

Dell Wyse Vulnerabilities Allow CVSS 9.8 Code Execution Diagram of Dell Wyse vulnerabilities showing remote code execution and CVE-2026-41120 exploit

Diagram of Dell Wyse vulnerabilities showing remote code execution and CVE-2026-41120 exploit

Dell Wyse Vulnerabilities Allow CVSS 9.8 Code Execution

Do Son June 29, 2026

TL;DR Dell released urgent security updates for its thin client management platform. Two critical Dell Wyse vulnerabilities...

Gemini CLI Vulnerability Hits Maximum CVSS 10 Score Google Gemini CLI vulnerability execution flow and CVE-2026-12537 patch details

Gemini CLI Vulnerability Hits Maximum CVSS 10 Score

Do Son June 29, 2026

A critical Gemini CLI vulnerability (CVE-2026-12537) exposes developer workflows to maximum severity attacks. Google disclosed this CVSS...

CVSS 10 Hoppscotch Mass Assignment: Full Server Compromise Diagram of Hoppscotch mass assignment vulnerability CVE-2026-50160 causing full server compromise

Diagram of Hoppscotch mass assignment vulnerability CVE-2026-50160 causing full server compromise

CVSS 10 Hoppscotch Mass Assignment: Full Server Compromise

Do Son June 29, 2026

A critical Hoppscotch mass assignment vulnerability threatens self-hosted API deployments. The flaw, tracked as CVE-2026-50160, allows unauthenticated...

DirtyClone Linux Kernel Flaw Lets Local Users Get Root DirtyClone Linux kernel privilege escalation flaw CVE-2026-43503 page cache exploit

DirtyClone Linux Kernel Flaw Lets Local Users Get Root

Do Son June 28, 2026

TL;DR DirtyClone is a Linux kernel privilege escalation flaw tracked as CVE-2026-43503. It scores 8.8 on the...

libssh2 vulnerability CVE-2026-58050 publickey subsystem heap buffer overflow PoC exploit

libssh2 Vulnerability CVE-2026-58050 Gets Public PoC Exploit

Do Son June 28, 2026

TL;DR Researchers publicly disclosed a libssh2 vulnerability tracked as CVE-2026-58050. The flaw lets a malicious SSH server...

CPython Tarfile Vulnerability Exposes Systems Diagram explaining the CPython tarfile vulnerability and CVE-2026-11940 bypass

CPython Tarfile Vulnerability Exposes Systems

Do Son June 28, 2026

TL;DR Security experts disclosed a high-severity flaw (CVE-2026-11940) in Python. A critical CPython tarfile vulnerability allows directory...

FOSSBilling Template Injection Flaw Exploited in the Wild Nextcloud website hacked showing unauthorized Cloudbox phishing redirect and wp2shell vulnerability.