Fix CVE-2026-34601 in @xmldom/xmldom (CVSS 7.5). A CDATA injection flaw allows attackers to bypass "safe zones" and manipulate business logic. Update now!
Data Integrity
Critical ASUSTOR ADM flaw CVE-2026-24936 (CVSS 9.5) allows remote file overwrite. Unauthenticated attackers can seize NAS control. Update to v5.1.2 now.
Three specification-level flaws in PCIe 6.0 IDE allow an attacker with physical access to inject stale/corrupted data into secure streams. Firmware updates are required to fix the data integrity risk.