Vulnerability Report Archives • Page 52 of 119 • Daily CyberSecurity

Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection Thymeleaf SSTI Bypass CVE-2026-41901 Thymeleaf SSTI CVE-2026-40477

Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection

Do Son May 6, 2026

The Thymeleaf project, a cornerstone for Java developers building modern server-side web applications, has issued a critical...

Decrypted and Vulnerable: Why Microsoft Edge Keeps All Your Passwords in Plaintext Memory Microsoft Edge plaintext memory

Decrypted and Vulnerable: Why Microsoft Edge Keeps All Your Passwords in Plaintext Memory

Do Son May 6, 2026

Security researcher Tom has identified a significant architectural flaw within Microsoft Edge. His investigation reveals that upon...

Nix Vulnerability Grants Root Access via NAR Parser Overflow CVE-2026-25137 Nix Daemon Privilege Escalation CVE-2026-44028

Nix Vulnerability Grants Root Access via NAR Parser Overflow

Do Son May 6, 2026

Nix, the robust package manager celebrated for bringing reliability and reproducibility to Linux and Unix systems, has...

GitOps Security Breach: Critical 9.6 CVSS Argo CD Flaw Exposes Plaintext Kubernetes Secrets Argo CD Secret Leak CVE-2026-42880 CVE-2024-28175 Argo CD DoS, Webhook Flaws

Argo CD Secret Leak CVE-2026-42880 CVE-2024-28175 Argo CD DoS, Webhook Flaws

GitOps Security Breach: Critical 9.6 CVSS Argo CD Flaw Exposes Plaintext Kubernetes Secrets

Do Son May 6, 2026

Argo CD, the leading GitOps continuous delivery tool for Kubernetes, has issued a high-priority patch for a...

Exploited in the Wild: Critical PAN-OS Buffer Overflow Grants Root Access to Palo Alto Firewalls PAN-OS Active Exploitation CVE-2026-0300 Root RCE

PAN-OS Active Exploitation CVE-2026-0300 Root RCE

Exploited in the Wild: Critical PAN-OS Buffer Overflow Grants Root Access to Palo Alto Firewalls

Do Son May 6, 2026

Palo Alto Networks has issued an urgent security advisory for a critical vulnerability in its PAN-OS software...

shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316

5.7 Million Users at Risk: Multiple 9.8 CVSS Breakthroughs Enable Remote Code Execution in vm2 Sandbox

Do Son May 6, 2026

The popular Node.js library vm2, a sandbox designed to run untrusted code with restricted access to built-in...

Critical Flaws in Apache Thrift Threaten Multi-Language Apache Thrift Vulnerabilities Cross-Language Service Security Apache Thrift Security RPC Vulnerability

Apache Thrift Vulnerabilities Cross-Language Service Security Apache Thrift Security RPC Vulnerability

Critical Flaws in Apache Thrift Threaten Multi-Language

Do Son May 6, 2026

The Apache Thrift project, a cornerstone framework for building scalable cross-language services, has released a high-priority update...

Rancher Flaw Allows Malicious Plugins to Hijack Kubernetes Clusters Rancher security flaws cluster privilege escalation Rancher Path Traversal CVE-2026-25705 Rancher Vulnerabilities, SAML Phishing CVE-2024-22036 Rancher, vulnerability

Rancher security flaws cluster privilege escalation Rancher Path Traversal CVE-2026-25705 Rancher Vulnerabilities, SAML Phishing CVE-2024-22036 Rancher, vulnerability

Rancher Flaw Allows Malicious Plugins to Hijack Kubernetes Clusters

Do Son May 5, 2026

The SUSE Rancher Security team has issued an urgent advisory regarding a high-severity vulnerability in Rancher, the...

Root RCE and Authentication Lockout Bypass: Public PoC Released for Critical OPNsense Firewall Vulnerabilities OPNsense Root RCE PoC Exploit Disclosed

Root RCE and Authentication Lockout Bypass: Public PoC Released for Critical OPNsense Firewall Vulnerabilities

Do Son May 5, 2026

OPNsense, the widely deployed FreeBSD-based firewall and routing platform, has released a critical security update to address...

The N-Day Nightmare: How SHADOW-EARTH-053 Breaches Governments Using “Old” Exploits SHADOW-EARTH-053 ShadowPad Espionage

The N-Day Nightmare: How SHADOW-EARTH-053 Breaches Governments Using “Old” Exploits

Do Son May 5, 2026

TrendAI Research has identified a persistent and methodical China-aligned threat cluster targeting government entities and critical infrastructure...

Critical 9.8 CVSS Flaws in Qualcomm Chipsets Enable Remote Takeover Qualcomm Security Bulletin CVE-2026-25254 RCE Qualcomm Diversification, Mobile Chip Competition CVE-2023-33025

Qualcomm Security Bulletin CVE-2026-25254 RCE Qualcomm Diversification, Mobile Chip Competition CVE-2023-33025

Critical 9.8 CVSS Flaws in Qualcomm Chipsets Enable Remote Takeover

Do Son May 5, 2026

Qualcomm has released its May 2026 Security Bulletin, disclosing a series of high-impact vulnerabilities across its proprietary...

Gremlin Injection Flaw in Apache Atlas Exposes Enterprise Data CVE-2024-46910 Apache Atlas Vulnerability Gremlin Code Injection

Gremlin Injection Flaw in Apache Atlas Exposes Enterprise Data

Do Son May 5, 2026

Apache Atlas, the foundational governance service that many enterprises rely on to manage compliance and data catalogs...

Millions at Risk: Apache HTTP Server Fixes Critical Remote Code Execution Flaw CVE-2024-39884 Apache HTTP Server RCE CVE-2026-23918

Millions at Risk: Apache HTTP Server Fixes Critical Remote Code Execution Flaw

Do Son May 5, 2026

The Apache HTTP Server Project, the long-standing standard for secure and extensible web services on UNIX and...

Multi Apache Polaris Flaws Granting Unauthorized Multi-Cloud Access Apache Polaris Security Iceberg Credential Bypass

Multi Apache Polaris Flaws Granting Unauthorized Multi-Cloud Access

Do Son May 5, 2026

The Apache Polaris project, a popular open-source catalog for Apache Iceberg, has released a major security update...

Critical Zero-Click Android Flaw Grants Remote Shell Access Without Interaction Android Zero-Click RCE CVE-2026-0073 Android sideloading CVE-2024-43096, CVE-2024-43770, CVE-2024-43771, CVE-2024-49747 and, CVE-2024-49748

Android Zero-Click RCE CVE-2026-0073 Android sideloading CVE-2024-43096, CVE-2024-43770, CVE-2024-43771, CVE-2024-49747 and, CVE-2024-49748

Critical Zero-Click Android Flaw Grants Remote Shell Access Without Interaction

Do Son May 5, 2026

Google has issued an urgent warning in its May 2026 Android Security Bulletin regarding a critical vulnerability...

Apache Neethi Patches Triple Threat of DoS and Redirection Flaws Apache Neethi Vulnerabilities WS-Policy Denial of Service

Apache Neethi Patches Triple Threat of DoS and Redirection Flaws

Do Son May 5, 2026

The Apache Neethi project, a cornerstone framework used by Java developers to implement WS-Policy specifications, has released...

Maximum Severity Flaw: How a Newline Character Shattered Gotenberg’s PDF Security Gotenberg PDF RCE CVE-2026-40281

Maximum Severity Flaw: How a Newline Character Shattered Gotenberg’s PDF Security

Do Son May 5, 2026

Thousands of companies rely on Gotenberg, the Docker-based API for document-to-PDF conversion, to handle production workloads. However,...

Patch Now: GnuTLS Release 3.8.13 Fixes 12 Vulnerabilities GnuTLS Security Update DTLS Heap Overwrite GnuTLS Vulnerability CVE-2026-1584

Patch Now: GnuTLS Release 3.8.13 Fixes 12 Vulnerabilities

Do Son May 4, 2026

The GnuTLS project, a vital secure communications library used extensively across the Linux ecosystem to implement SSL,...

Sentry’s 9.1 CVSS SSO Flaw Lets Attackers “Link” Their Way Into Your Account Sentry SAML SSO Bypass CVE-2026-42354

Sentry’s 9.1 CVSS SSO Flaw Lets Attackers “Link” Their Way Into Your Account

Do Son May 4, 2026

Sentry, the widely used application monitoring and error-tracking platform, has disclosed a critical vulnerability in its SAML...

Fortra BoKS vulnerability OS command injection, CVE-2026-9862 Altium Enterprise Server Vulnerability CVE-2026-9129 Path Traversal Patreon OAuth Vulnerability Identity Collision DRC INSIGHT Vulnerability Exam Data Hijacking Horner Automation PLC Industrial Brute Force Honeywell IQ4x Vulnerability CVE-2026-3611 DJI Romo vacuum security flaw Python Cryptography Vulnerability CVE-2026-26007 Open5GS Vulnerability CVE-2026-0622 Vivotek IP7137 Vulnerabilities CVE-2025-66049 Forcepoint DLP Vulnerability CVE-2025-14026 Cellopoint Secure Email Gateway - CVE-2024-9043

Critical Collision Bug in Auth Library Merges All Patreon Users

Do Son May 4, 2026

A critical authentication vulnerability has been discovered in the popular auth library, a tool used by developers...

CVE-2026-29200: A 9.9 CVSS Comet Backup Flaw Granting Total Cross-Tenant Takeover Comet Backup RCE vulnerability CVE-2026-32999 patch Comet Backup IDOR Cross-Tenant Takeover

Comet Backup RCE vulnerability CVE-2026-32999 patch Comet Backup IDOR Cross-Tenant Takeover

CVE-2026-29200: A 9.9 CVSS Comet Backup Flaw Granting Total Cross-Tenant Takeover

Do Son May 4, 2026

Comet Backup, a prominent provider of secure backup software for IT professionals and global businesses, has issued...

Apache MINA Fixes Critical RCE Vulnerabilities Apache MINA flaws critical deserialization bypass Apache MINA Deserialization CVE-2026-42778 RCE Apache MINA RCE CVE-2026-41635

Apache MINA flaws critical deserialization bypass Apache MINA Deserialization CVE-2026-42778 RCE Apache MINA RCE CVE-2026-41635

Apache MINA Fixes Critical RCE Vulnerabilities

Do Son May 4, 2026

The Apache MINA project has issued a high-priority security release to address two critical vulnerabilities that were...