Vulnerability

Critical Authentication Bypass Flaw in ClawDBot Enables Remote Code Execution A high-severity vulnerability (GHSA-g8p2-7wf7-98mq) in ClawDBot, a widely used npm…

ZAP Project Identifies Memory Leak in JavaScript Engine Affecting Active Scans The OWASP ZAP project has uncovered a memory leak…

New PUA Exploits Legitimate IT Tool to Enable Silent Cyberattacks Researchers from Point Wild’s Lat61 Threat Intelligence Team have…

Exposed ATM Router Raises Man-in-the-Middle Attack Risks A recent discovery highlights a critical hardware security oversight in an ATM installation,…

Critical CRLF Injection Vulnerability in Gakido HTTP Client Library (CVE-2026-24489) A critical vulnerability in Gakido, an HTTP client library developed…

NVIDIA Patches Critical GPU Driver Vulnerabilities in High-Severity Update On January 27, 2026, NVIDIA released security updates addressing five high-severity…

Interlock Ransomware Exploited Zero-Day in Cisco Firewall Before Patch Ransomware group Interlock exploited a maximum-severity zero-day vulnerability (CVE-2026-20131) in Cisco…

Critical SmarterMail RCE Vulnerability Under Active Exploitation A severe remote code execution (RCE) vulnerability in SmarterTools’ SmarterMail software is being…

Critical RCE Vulnerability in GNU InetUtils telnetd Exposes 800,000 Systems A severe remote code execution (RCE) vulnerability, CVE-2026-24061, has…

Cybersecurity Roundup: Zero-Days, Privacy Fines, AI Vulnerabilities, and Exposed Criminal Data The past week brought significant developments in cybersecurity, from…

CISA Warns of Actively Exploited Zimbra and SharePoint Vulnerabilities The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued…

Critical RCE Vulnerability in WPvivid Backup Plugin Exposes 800,000+ WordPress Sites A severe remote code execution (RCE) vulnerability in…