CVE-2026-58048 lets cPanel users run SQL commands in root context, CVSS 9.4. A second flaw, CVE-2026-58047, enables request smuggling.
http-request-smuggling
Discover three critical flaws (including CVE-2026-2835) in Cloudflare's Pingora Rust framework causing request smuggling and cache poisoning. Update now.
QNAP warns its NetBak PC Agent users to patch a critical ASP.NET Core flaw (CVSS 9.8) that allows attackers to hijack credentials via HTTP request smuggling.
Recent discoveries have exposed CVE-2024-34350 & CVE-2024-34351 which could compromise user data and server operations
Server Crash Vulnerability (CVE-2024-27983): This high-severity vulnerability resides within Node.js's HTTP/2 server