Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Critical Siemens IoT2050 Vulnerability Exploited in Real-World Attacks (CVE-2026-58115)

– A critical security vulnerability affecting Siemens industrial IoT gateways is now being exploited by attackers, who are using the flaw to deploy Linux malware and webshells onto vulnerable systems.

Read More
NewsSecurity Vulnerabilities

Critical OPNsense Vulnerability Could Allow Attackers to Execute Commands as Root (CVE-2026-123025)

– A critical security vulnerability affecting the OPNsense firewall platform could allow authenticated attackers to execute arbitrary operating system commands with root privileges.

Read More
NewsSecurity Vulnerabilities

Critical Cisco SD-WAN Vulnerability Carries Maximum Severity Score of 10 (CVE-2026-20127)

– A critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN infrastructure has been assigned the maximum CVSS severity score of 10.0. Tracked as CVE-2026-20127, the flaw could allow unauthenticated remote attackers to obtain administrative privileges, potentially giving them control over network configurations.

Read More
NewsSecurity Vulnerabilities

Cisco Snort Remote Code Execution Vulnerability (CVE-2026-20218)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort.

Read More
NewsSecurity Vulnerabilities

Critical PHP Vulnerabilities Could Allow Remote Code Execution on Web Servers

Two critical security vulnerabilities have been discovered in PHP, potentially allowing attackers to execute malicious code on vulnerable servers without

Read More
NewsSecurity Vulnerabilities

Cisco Issues Critical Security Updates for Meraki Networking Devices

– Cisco has released security updates to address multiple vulnerabilities affecting its Meraki networking equipment, including wireless access points, switches, cellular gateways, smart cameras and security appliances.

Read More
NewsSecurity Vulnerabilities

Critical Authentication Flaw in Pingvin Share X Could Allow Account Takeover (CVE-2026-108157)

– A critical security vulnerability in Pingvin Share X could allow remote attackers to take over user accounts, including administrator accounts, by exploiting weaknesses in the application’s OAuth authentication process.

Read More
NewsSecurity Vulnerabilities

Windows DirectX Graphics Kernel Vulnerability Could Allow Privilege Escalation (CVE-2026-50375)

– A security vulnerability in Microsoft Windows could allow a local attacker to elevate their privileges and potentially execute code with Windows kernel-level permissions.

Read More
NewsSecurity Vulnerabilities

OpenAM vulnerability allows server-side request forgery (CVE-2026-105122)

– A newly disclosed security vulnerability in OpenIdentityPlatform OpenAM could allow attackers to make vulnerable authentication servers send requests to internal systems and resources.

Read More
NewsSecurity Vulnerabilities

Critical Apache OpenOffice Flaw Could Allow System Takeover (CVE-2026-59265)

– A critical security vulnerability in Apache OpenOffice could allow an attacker to execute arbitrary code on a vulnerable computer simply by getting a victim to open a specially crafted document.

Read More