Topic
39 articles
CyberSecureToday covers Security Vulnerability across 39 articles published between 7 Nov 2026 and 16 Nov 2026.
The coverage includes 39 vulnerability advisories. 37 advisories are rated critical or high severity, and 4 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.
Stories on Security Vulnerability most often intersect with Vulnerability Analysis, Patch & Fix and OpenEMR, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Nasir Incorrect Privilege Assignment vulnerability in Na Vulnerability Disclosed (CVE-2026-125769)”, was published 16 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelCVE-2026-125769 in Nasir Incorrect Privilege Assignment vulnerability in Na (Security Vulnerability) allows remote attackers to trigger arbitrary code exec
Threat IntelCVE-2026-125795 in PHP Improper Control of Filename for Include/Require S (Security Vulnerability) allows remote attackers to trigger arbitrary code execut
Threat IntelCVE-2026-129444 in D-Link DSL-6740C (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch rele
PostgreSQLCVE-2026-6460 in PostgreSQL Patches Core System & Services (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Ven
Threat IntelCVE-2026-128332 in Listmonk (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 7.0.0-beta.2 and later.
Threat IntelCVE-2026-124005 in XWEB EVO (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 5.8.8 and later.
Threat IntelCVE-2026-127277 in Linksys Security flaw has been discovered in Linksys EA810 (Security Vulnerability) allows remote attackers to trigger arbitrary code ex
Threat IntelCVE-2026-119618 in Apache Core System & Services (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.4.7
FortinetCVE-2026-126253 in Fortinet Authentication bypass by primary weakness vulnerab (Security Vulnerability) allows remote attackers to trigger arbitrary code e
FortinetCVE-2026-126254 in Fortinet Numeric truncation error vulnerability in Fortinet (Security Vulnerability) allows remote attackers to trigger arbitrary code e
FortinetCVE-2026-126257 in Fortinet Use of hard-coded password vulnerability in Fortin (Security Vulnerability) allows remote attackers to trigger arbitrary code e
Threat IntelCVE-2026-126812 in BlueprintUE Self-Hosted Edition (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 4.3
Threat IntelCVE-2026-125298 in AsiaInfo Business Support System (BSS) (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Vers
Threat IntelCVE-2026-126542 in WWBN AVideo (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 29.7.1 and later.
Threat IntelCVE-2026-126539 in Directus (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 12.1.0 and later.
Active ExploitCVE-2026-111793 in Openwave Messaging Limited Webtop Media Transcoder (Security Vulnerability) allows remote attackers to trigger active system exploitatio
MicrosoftCVE-2026-124194 in Microsoft Office (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch re
Threat IntelCVE-2026-115646 in HiRDB Partial String Comparison Vulnerability in HiRDB (Security Vulnerability) allows remote attackers to trigger arbitrary code execut
Threat IntelCVE-2026-125086 in D-Link Vulnerability has been found in D-Link M60 (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
DevSecOpsCVE-2026-77596 in Github.com/kubeflow/pipelines (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.18.0
Threat IntelCVE-2026-125370 in Kubero (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.1.1 and later.
Threat IntelCVE-2026-125384 in INDOTALENT WHMS (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 10.20261109 and lat
Threat IntelCVE-2026-125383 in INDOTALENT WHMS (Asp (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 10.20261109 an
Threat IntelCVE-2026-118462 in Update components download and execute code withou (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.