Do Son CVE-2026-59270 (CVSS 9.4) tops four Spring Security vulnerabilities. Its embedded LDAP flaw lets attackers read or modify in-memory directory entries.
WebAuthn
A critical OpenAM WebAuthn RCE flaw (CVE-2026-45051) allows code execution via Java deserialization. Update OpenAM to 16.1.1 to stay protected.
Yehuda Smirnov has uncovered a critical vulnerability in Microsoft's Windows Hello for Business (WHfB) authentication system
Today, the W3C and FIDO Alliance standards bodies announced that Web browsers are building a new type...