Vulnerability

Critical NGINX JavaScript Vulnerability (CVE-2026-8711) Enables Remote Code Execution A critical heap buffer overflow vulnerability, CVE-2026-8711, has been disclosed in…

Critical Vulnerabilities in Avada Builder Plugin Expose 1 Million WordPress Sites to Attacks On May 13, 2026, cybersecurity firm Wordfence…

18-Year-Old Critical RCE Vulnerability Discovered in NGINX A severe heap buffer overflow vulnerability (CVE-2026-42945) has been uncovered in NGINX, affecting…

GitHub Token Leak Exposes PHP Projects to Credential Theft A recent format change in GitHub’s authentication tokens has triggered…

Wake County Student’s Discovery Exposes School Data Security Flaws A routine file search by Abner Sanabria Cruz, a senior…

Critical Zero-Click Outlook Vulnerability Patched in Microsoft’s Latest Update Microsoft’s June Patch Tuesday addressed 137 vulnerabilities, including a…

Microsoft 365 Android Apps Exposed User Tokens Due to Debug Flag Left in Production A critical vulnerability in multiple Microsoft…

Microsoft 365 Android Apps Exposed to Silent Account Takeover via Forgotten Debug Flag A critical vulnerability, dubbed FlagLeft, allowed any…

Critical RCE Vulnerability Patched in Anthropic’s Claude Code AI Assistant On May 12, 2026, security researcher Joernchen of 0day.…

Critical Windows DNS Client Vulnerability (CVE-2026-41096) Exposes Enterprise Networks to Remote Code Execution A newly disclosed critical vulnerability in Microsoft’…

Microsoft Teams Android Vulnerability (CVE-2026-32185) Exposes Users to Spoofing Attacks On May 12, 2026, Microsoft disclosed CVE-2026-32185, a security flaw…

JetBrains Patches High-Severity Privilege Escalation Flaw in TeamCity JetBrains has addressed a high-severity vulnerability (CVE-2026-44413) in its TeamCity continuous integration…