Vulnerability

Critical WatchGuard AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands

WatchGuard has announced the discovery of three high-impact vulnerabilities in its wireless access point platform. Two of these critical issues…

1 month ago

ViewSonic vCast Vulnerabilities Let Attackers Gain Full Device Control Without Authentication

The CERT Coordination Center (CERT/CC) has revealed a chain of three vulnerabilities in ViewSonic’s vCast software that could enable unauthenticated…

1 month ago

14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape

A vulnerability in the Linux kernel’s AF_ALG cryptographic interface, which has existed for 14 years, can let an unprivileged local…

1 month ago

ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data

ServiceNow has disclosed five vulnerabilities affecting its AI Platform, including two critical flaws that could allow unauthenticated attackers to execute…

1 month ago

CISA Flags WSO2 Security Flaw Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting WSO2, tracked as CVE-2026-5430, to its…

1 month ago

CISA Adds Multiple Check Point Product Flaws to Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities affecting multiple Check Point products to its…

1 month ago

Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection

Security researchers have revealed a vulnerability chain known as “SalesBleed,” associated with Salesforce's Agentforce. This vulnerability could allow attackers to…

1 month ago

Sudo Vulnerability Lets Attackers Bypass Time-Based Authorization Controls

A recently disclosed high-severity vulnerability in Sudo could allow local, unprivileged Linux users to manipulate time-based authorization restrictions in sudoers…

1 month ago

Cloudflare Containers Flaw Could Expose Data From Other Customers’ Workloads

Cloudflare has addressed a cross-tenant data exposure vulnerability in its Containers platform that could have allowed one customer's workload to…

1 month ago

Roundcube Webmail Flaw Lets Attackers Trigger SQL Injection Without Authentication

A highly severe vulnerability in Roundcube Webmail is being actively exploited, posing risks to unpatched email servers through unauthenticated SQL…

1 month ago