Vulnerability

Critical GitLab RCE Vulnerability Exploits Ruby JSON Parser Flaws A newly disclosed vulnerability in GitLab allows remote code execution (RCE)…

Critical SharePoint Server Vulnerability (CVE-2026-45659) Exposes Organizations to Remote Code Execution On May 21, 2026, Microsoft disclosed a critical security…

Critical Langflow Vulnerability Exploited in the Wild, Added to CISA KEV Catalog The U.S. Cybersecurity and Infrastructure Security Agency…

CISA Warns of Actively Exploited Trend Micro Apex One Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has…

Trump Mobile’s T1 Phone Site Exposed Customer Data via Simple Exploit A security flaw in Trump Mobile’s website…

Highly Critical Drupal Core Vulnerability Set for May 20, 2026 Disclosure A severe security flaw in Drupal core, rated "…

Critical Cisco Secure Workload Vulnerability Exposes Internal APIs to Unauthenticated Attacks Cisco has disclosed a severe security flaw (CVE-2026-20223) in…

TP-Link Patches High-Severity Vulnerabilities in Kasa Smart Cameras TP-Link has released security updates for two vulnerabilities in its Kasa EC70…

Google’s Chromium Bug Leak Exposes Unfixed JavaScript Execution Flaw Google accidentally leaked details of an unfixed vulnerability in Chromium…

Drupal Admins Scramble to Patch Critical SQL Injection Vulnerability Drupal has issued an urgent security update to address a maximum-severity…

PinTheft: New Linux LPE Exploit Grants Root Access via RDS Zerocopy Bug A newly disclosed Linux Local Privilege Escalation (LPE)…

Critical NGINX JavaScript Vulnerability (CVE-2026-8711) Enables Remote Code Execution A newly disclosed vulnerability in NGINX JavaScript (njs), tracked as CVE-2026-8711,…