Vulnerability

Critical NGINX JavaScript Vulnerability (CVE-2026-8711) Enables Remote Code Execution A newly disclosed vulnerability in NGINX JavaScript (njs), tracked as CVE-2026-8711,…

Critical Windows BitLocker Zero-Day Vulnerability Exposes Encrypted Data via Physical Access Microsoft has revealed a severe zero-day vulnerability in Windows…

Critical PostgreSQL RCE Exploit (CVE-2026-2005) Demonstrated in Public PoC A proof-of-concept (PoC) exploit for CVE-2026-2005, a critical remote code execution…

New Linux Kernel Vulnerability "DirtyClone" Enables Root Access Without a Trace A critical local privilege escalation flaw in…

High-Severity SSRF Vulnerability in OHIF Viewers DICOM Exposes Clinician Tokens A high-severity Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-12473) has been…

Kodak Investigates Data Breach as ShinyHunters Claims Responsibility Eastman Kodak Company, the 144-year-old imaging and materials giant headquartered in Rochester,…

ASUS Router Vulnerability Exploited by RondoDox Botnet After Six-Year Dormancy Cybersecurity firm VulnCheck has uncovered a campaign by the RondoDox…

Cyberattack Targets U.S. Healthcare Sector: Ransomware Group Exploits Zero-Day Vulnerability A recent cyberattack has disrupted operations across multiple U.…

Critical RCE Vulnerability in Apache Flink Exposes Distributed Data Processing Clusters A newly disclosed critical vulnerability in Apache Flink (CVE-2026-35194)…

Microsoft Warns of Actively Exploited Exchange Server Vulnerability (CVE-2026-42897) Microsoft has issued an urgent security alert for a critical spoofing…

New "PinTheft" Linux LPE Vulnerability Exposes Systems to Root Access Exploits A proof-of-concept (PoC) exploit has been released…

DirtyDecrypt Linux Kernel Exploit Grants Root Access via RxGK Subsystem Flaw A new proof-of-concept (PoC) exploit, dubbed DirtyDecrypt (or DirtyCBC)…