Vulnerability Report Archives • Page 4 of 88 • Daily CyberSecurity

Poweradmin Host Header Injection Lets Attackers Hijack DNS Accounts

Poweradmin host header injection flaw CVE-2026-54588 enabling DNS admin account takeover

Poweradmin Host Header Injection Lets Attackers Hijack DNS Accounts

Do Son July 2, 2026

TL;DR A critical flaw in Poweradmin lets attackers take over DNS administrator accounts. Tracked as CVE-2026-54588, it...

OpenAM WebAuthn Flaw Allows Remote Code Execution via Deserialization OpenAM WebAuthn RCE flaw CVE-2026-45051 from Java deserialization in access management

OpenAM WebAuthn RCE flaw CVE-2026-45051 from Java deserialization in access management

OpenAM WebAuthn Flaw Allows Remote Code Execution via Deserialization

Do Son July 2, 2026

TL;DR A critical flaw in OpenAM can let an attacker run code on the server. Tracked as...

Hardcoded Key Enables Authentication Bypass in NetComm NF20MESH Routers NetComm authentication bypass using a hardcoded AES key to forge admin cookies

NetComm authentication bypass using a hardcoded AES key to forge admin cookies

Hardcoded Key Enables Authentication Bypass in NetComm NF20MESH Routers

Do Son July 2, 2026

TL;DR Signal 11 disclosed a NetComm authentication bypass tracked as CVE-2026-35019. The flaw scores 9.2 on CVSS...

WinRAR Vulnerability Causes Heap Overflow in RAR5 Recovery Volumes WinRAR vulnerability CVE-2026-14191 causing a heap overflow in the RAR5 recovery volume parser

WinRAR vulnerability CVE-2026-14191 causing a heap overflow in the RAR5 recovery volume parser

WinRAR Vulnerability Causes Heap Overflow in RAR5 Recovery Volumes

Do Son July 2, 2026

TL;DR RARLAB fixed a WinRAR vulnerability in version 7.23. The flaw, CVE-2026-14191, causes a heap overflow in...

JetBrains Patches CVSS 10 Authentication Bypass Affecting 15 Million Developers JetBrains authentication bypass vulnerability CVE-2026-50242 affecting JetBrains Hub developers

JetBrains authentication bypass vulnerability CVE-2026-50242 affecting JetBrains Hub developers

JetBrains Patches CVSS 10 Authentication Bypass Affecting 15 Million Developers

Do Son July 2, 2026

TL;DR JetBrains fixed three security flaws across Hub, YouTrack, and GoLand. The worst is a JetBrains authentication...

NVIDIA Security Updates Fix Critical Device Vulnerabilities NVIDIA security updates for ConnectX mitigating CVE-2025-23351

NVIDIA Security Updates Fix Critical Device Vulnerabilities

Do Son July 1, 2026

NVIDIA has released essential software patches targeting 13 newly disclosed vulnerabilities across multiple product lines. These NVIDIA...

Kemp LoadMaster RCE vulnerability CVE-2026-8037 warning graphic

Kemp LoadMaster RCE Vulnerability Exploited in the Wild After Public PoC Release

Do Son July 1, 2026

TL;DR Attackers began exploiting the Kemp LoadMaster RCE vulnerability, tracked as CVE-2026-8037, on June 29, 2026. That...

Apache Tomcat vulnerabilities including an authentication bypass via JNDIRealm GSSAPI bind (CVE-2026-55957)

Apache Tomcat Vulnerabilities Allow Authentication Bypass

Do Son July 1, 2026

TL;DR The Apache Tomcat project disclosed seven vulnerabilities on 29 June 2026. The most serious Apache Tomcat...

Chrome Security Update Patches 382 Vulnerabilities, 15 Critical Chrome security update patching 382 vulnerabilities including 15 critical use-after-free flaws

Chrome security update patching 382 vulnerabilities including 15 critical use-after-free flaws

Chrome Security Update Patches 382 Vulnerabilities, 15 Critical

Do Son July 1, 2026

TL;DR Google shipped a large Chrome security update on 30 June 2026. It fixes 382 security flaws...

Six Critical Incus Vulnerabilities Patched in v7.2.0 Incus vulnerabilities CVE-2026-48769 CVE-2026-48755 root file write security update

Six Critical Incus Vulnerabilities Patched in v7.2.0

Do Son July 1, 2026

TL;DR The Incus team patched six critical flaws in version 7.2.0. Each one scores 9.9 on the...

GeoVision camera vulnerabilities CVE-2026-57878 GV-LPC2011 GV-LPC2211 firmware V1.13 security advisory

Ten GeoVision Camera Vulnerabilities Hit GV-LPC License Plate Models

Do Son July 1, 2026

TL;DR GeoVision disclosed 10 flaws in its GV-LPC2011 and GV-LPC2211 license plate cameras. All affect firmware V1.12...

Fluentd Vulnerabilities Patched in v1.19.3, Including Critical RCE Fluentd vulnerabilities CVE-2026-44024 RCE CVE-2026-44161 SSRF security patch v1.19.3

Fluentd vulnerabilities CVE-2026-44024 RCE CVE-2026-44161 SSRF security patch v1.19.3

Fluentd Vulnerabilities Patched in v1.19.3, Including Critical RCE

Do Son July 1, 2026

TL;DR The Fluentd project patched four security flaws in version 1.19.3. The worst, CVE-2026-44024, scores 9.8 and...

ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories ProFTPD ACL bypass vulnerability CVE-2026-35025 access control bypass in RNFR command

ProFTPD ACL bypass vulnerability CVE-2026-35025 access control bypass in RNFR command

ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories

Do Son July 1, 2026

TL;DR A new ProFTPD ACL bypass, CVE-2026-35025, scores 8.6 on CVSS. It lets a logged-in FTP user...

Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs Plone RCE vulnerability via TALES injection in the Classic portlet

Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs

Do Son July 1, 2026

TL;DR Plone patched three critical flaws across two add-on packages. The worst is a Plone RCE vulnerability...

Adobe ColdFusion vulnerabilities enabling arbitrary code execution with CVSS 10 scores (APSB26-68)

Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution

Do Son June 30, 2026

TL;DR Adobe shipped fixes for 11 Adobe ColdFusion vulnerabilities on 30 June 2026. Six earn a perfect...

Six NetScaler Vulnerabilities Allow Denial of Service and File Read NetScaler vulnerabilities causing denial of service, memory overread, and unauthenticated file read on NetScaler ADC and Gateway

NetScaler vulnerabilities causing denial of service, memory overread, and unauthenticated file read on NetScaler ADC and Gateway

Six NetScaler Vulnerabilities Allow Denial of Service and File Read

Do Son June 30, 2026

TL;DR Cloud Software Group patched six NetScaler vulnerabilities in NetScaler ADC and NetScaler Gateway. Three rate CVSS...

NLnet Labs Patches Four Critical NSD Vulnerabilities NSD DNS vulnerabilities and CVE-2026-12244

NLnet Labs Patches Four Critical NSD Vulnerabilities

Do Son June 30, 2026

TL;DR NLnet Labs recently released version 4.14.3 of the Name Server Daemon (NSD) to patch four severe...

Thousands Affected by NVIDIA 9.8 Auth Bypass NVIDIA security updates fixing CVE-2026-24270, CVE-2026-24260, and CVE-2026-24264

Thousands Affected by NVIDIA 9.8 Auth Bypass

Do Son June 30, 2026

TL;DR NVIDIA patched several severe vulnerabilities across its AI platforms. The most critical flaw is a 9.8...

WSO2 API Manager Hit by CVSS 10 Auth Bypass and Six More Flaws WSO2 API Manager vulnerabilities CVE-2026-5430 CVSS 10 JWT authentication bypass security advisory

WSO2 API Manager vulnerabilities CVE-2026-5430 CVSS 10 JWT authentication bypass security advisory

WSO2 API Manager Hit by CVSS 10 Auth Bypass and Six More Flaws

Do Son June 30, 2026

TL;DR WSO2 patched seven vulnerabilities across its API platform, including WSO2 API Manager, in June 2026. The...

Synology MailPlus Server Patched for CVSS 10 Flaw CVE-2026-13136 Synology MailPlus Server vulnerability CVE-2026-13136 CVSS 10 security advisory

Synology MailPlus Server vulnerability CVE-2026-13136 CVSS 10 security advisory

Synology MailPlus Server Patched for CVSS 10 Flaw CVE-2026-13136

Do Son June 30, 2026

TL;DR Synology fixed three vulnerabilities in Synology MailPlus Server, the email package for its NAS devices. The...

SimpleHelp Authentication Bypass Exploited in the Wild to Deploy TaskWeaver and Djinn Stealer

Do Son June 30, 2026

On 29 June 2026, CISA added CVE-2026-48558 to its Known Exploited Vulnerabilities catalog. The flaw is a...

Critical wolfSSL Security Vulnerabilities Expose IoT Systems Diagram explaining wolfSSL security vulnerabilities and X.509 trust-chain bypass.

Diagram explaining wolfSSL security vulnerabilities and X.509 trust-chain bypass.

Critical wolfSSL Security Vulnerabilities Expose IoT Systems

Do Son June 30, 2026

TL;DR Developers patched six high-severity wolfSSL security vulnerabilities in the embedded SSL library. These flaws include an...

Critical Alert 1 Active Exploit Detected Today