CVE/vulnerability
Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls
Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security Appliance...
CVE/vulnerability
CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js
CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following confirmed evidence of exploitation.
Added...
CVE/vulnerability
Cloudflare Image Transformation Flaw Allows Hackers to Bypass CSP and Execute Malicious JavaScript
Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy (CSP), enabling malicious JavaScript...
CVE/vulnerability
Critical Veeam Backup & Replication Flaw Allows Unauthenticated Attackers to Bypass Authorization
Veeam has released security updates to address a critical authorization bypass vulnerability in Backup & Replication. This flaw, tracked as CVE-2026-108142, allows an unauthenticated...
CVE/vulnerability
Critical UEFI Firmware Flaw Allows Attackers to Execute Malicious Code Before OS Boots
A critical vulnerability in EDK II's PXE network boot driver could allow unauthenticated attackers to execute malicious code before the operating system loads. This...
CVE/vulnerability
HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges
HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions gain elevated Consul privileges.
This vulnerability...
CVE/vulnerability
Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens
A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft apps and steal authentication...
cyber security
Critical Citrix NetScaler RCE Vulnerability Under Active Attack as Hackers Deliver FreeBSD Malware
Citrix NetScaler ADC and Gateway appliances are under active attack via CVE-2026-88771, a critical, unauthenticated remote code execution vulnerability that requires no optional features...