1,437 articles
Threat IntelCVE-2026-103813 in Dell PowerStore (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch release
Threat IntelCVE-2026-63079 in RBH Access Technologies Integra32 Security Managem (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-95614 in Zenitel The host configuration watcher in Zenitel Connect (Input Validation) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-129126 in C-Kermit (Out-of-Bounds Write) allows remote attackers to trigger arbitrary code execution. Patch: Version 11.1.515 and later.
Threat IntelCVE-2026-129124 in C-Kermit (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 11.1.515 and later.
Threat IntelCVE-2026-95377 in OS command injection in the TFTP provisioning modu (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Threat IntelCVE-2026-123965 in A Prompt injection vulnerability in all versions of (Input Validation) allows remote attackers to trigger arbitrary code execution. Patc
Threat IntelCVE-2026-129161 in Dromara free-fs (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.3.1 and later.
Threat IntelCVE-2026-129165 in Tactical RMM (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.6.1 and later.
Threat IntelCVE-2026-129171 in NginxPulse (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.6.26 and later.
Threat IntelCVE-2026-124020 in Control Web Panel (CWP) (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch rel
Threat IntelCVE-2026-124021 in Control Web Panel (CWP) (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch
Data BreachForensic analysis of the data breach impacting City: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Threat IntelCVE-2026-129167 in Seafile SeaDoc converter (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.0.11 and later
Threat IntelCVE-2026-82504 in VITEC EZ TV Platform Server (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution. Patch: Version 8.5.0
MicrosoftCritical vulnerability in Microsoft Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and
Threat IntelCritical vulnerability in Curious Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and r
Threat IntelCritical vulnerability in German Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and re
Data BreachCritical vulnerability in University Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis an
AWS CloudTechnical analysis of AI agent vulnerability and prompt injection risks in Amazon Threat: mechanics, tool exploitation, and enterprise guardrails.
Threat IntelCritical vulnerability in NYC Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and remed
Gov / DefenseCritical vulnerability in FBI Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and remed
Crypto / Web3Forensic analysis of the security incident impacting Trezor: smart contract mechanics, fund flows, and defensive hardening.
Threat IntelCritical vulnerability in Industry Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and