CVE/vulnerability

Ubuntu Releases Security Fixes for Critical Linux Kernel Vulnerability Allowing Remote Code Execution

Ubuntu has made fixes available for CVE-2026-98432, a critical Linux kernel vulnerability allowing remote code execution through IPv4 TCP connection…

3 days ago

5-Year-Old Linux Kernel Vulnerability Allows Unprivileged Attackers to Gain Root Access

A Linux kernel flaw that sat unnoticed for nearly five years can let an unprivileged local user take full root…

3 days ago

Critical Langflow AI Vulnerabilities Allow Hackers to Execute Remote Code Without Authentication

IBM has disclosed seven vulnerabilities in Langflow OSS, including critical flaws such as authentication bypass and code injection that attackers…

3 days ago

Critical Incus and LXD Vulnerabilities Allow Unauthenticated Attackers to Gain Full Cluster Access

Critical certificate-validation vulnerabilities have been identified in Incus and Canonical LXD, allowing unauthenticated attackers to impersonate trusted identities and compromise…

4 days ago

CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-97229, a critical vulnerability affecting both GitLab Community Edition and…

7 days ago

Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials

Hackers exploited a chain of zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances, allowing them to execute commands with…

7 days ago

WordPress 7.1.4 Fixes 22 Security Vulnerabilities, Including RCE Flaw Under Active Attack

WordPress released version 7.1.4 on October 28, 2026, which addresses 22 security vulnerabilities. Among them is an unauthenticated remote code…

7 days ago

Critical Linux Kernel Vulnerability Lets Remote Attackers Crash Ubuntu Systems

A critical vulnerability in the Linux kernel, identified as CVE-2026-98432, threatens Ubuntu systems through a networking memory flaw that could…

7 days ago

Chinese Hackers Exploit VMware ESXi Zero-Day to Target Law Firms in Cyber Espionage Attacks

Chinese state-linked hackers have exploited a zero-day vulnerability in VMware ESXi during espionage operations aimed at U.S. law firms, according…

1 week ago

CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to…

1 week ago