Critical Node.js Security Updates Released Developers must quickly apply the newest Node.js security updates. The Node.js project...
Vulnerability Report
Industrial network gear is back in the spotlight. Moxa has disclosed two flaws in its NPort serial...
The numbers look alarming at first glance. According to the 2026 vulnerability forecast from the Forum of...
A critical prototype pollution flaw now threatens one of the npm ecosystem’s most popular translation tools. Tracked...
Zyxel has rolled out firmware patches for a serious flaw in its popular GS1900 series switches. Tracked...
[cve_product_glance product=”Splunk AI Toolkit” cves=”CVE-2026-20266, CVE-2026-20265″ impact=”OS Command Injection” action=”Update Splunk AI Toolkit to 5.7.4 now”] ...
A critical Gravity SMTP vulnerability is currently facing active exploitation in the wild. Consequently, WordPress site administrators...
Network administrators must remain vigilant as new Cisco ISE vulnerabilities have been publicly disclosed. Multiple severe flaws...
A critical Apache Shiro LDAP Injection vulnerability has recently emerged. Specifically, security researchers identified a severe...
Google has shipped a major Chrome security update, and it closes 33 distinct vulnerabilities. The Stable channel...
A critical Fortra BoKS vulnerability has put privileged access servers at risk across Linux and UNIX fleets....
Security researchers have disclosed a serious Yarbo robot vulnerability that could hand attackers control over thousands of...
A critical Cloud Foundry UAA vulnerability has emerged, and it lets attackers slip past SAML logins entirely....
NVIDIA has issued an urgent fix for its NeMo Framework, the popular open-source toolkit for building generative...
A fresh MongoDB Server vulnerability cluster has surfaced, and it puts widely used document databases at real...
A dangerous ShapedPlugin supply chain attack is currently threatening WordPress websites. Security researchers at Wordfence discovered this...
The maintainers of Tornado have fixed three Tornado security vulnerabilities in a single update. The popular Python...
A critical Vitest RCE vulnerability has put a hugely popular testing framework in the spotlight. Tracked as...
A critical Haskell TLS vulnerability is putting secure connections at risk across finance and enterprise systems. CERT/CC...
CISA has disclosed seven serious Naxclow IoT vulnerabilities affecting popular smart doorbells and cameras. Together, these flaws...
FreeSWITCH, the popular open-source telecom stack, has just patched two critical security flaws. Both are pre-authentication heap...
A critical phpBB authentication bypass is putting countless online communities at risk right now. The flaw, tracked...