Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity VulnerabilitiesUncategorized

Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability (CVE-2026-20092)

– A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance.

Read More
NewsSecurity Vulnerabilities

Cisco Unified Communications Products Remote Code Execution Vulnerability (CVE-2026-20045)

CVE number = CVE-2026-20045 A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition

Read More
NewsSecurity Vulnerabilities

Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability (CVE-2026-0778)

– This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations.

Read More
NewsSecurity Vulnerabilities

WordPress Modular DS Plugin 2.5.2 is vulnerable to a high priority Privilege Escalation (CVE-2026-23800)

CVE number = CVE-2026-23800 This could allow a malicious actor to escalate their low privileged account to something with higher

Read More
NewsSecurity Vulnerabilities

Cyberattacks Against Cisco Secure Email Gateway And Cisco Secure Email and Web Manager

– On December 10th 2025 Cisco became aware of a new cyberattack campaign targeting a limited subset of appliances with certain ports open to the internet that are running Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager.

Read More
NewsSecurity Vulnerabilities

npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVE-2026-0775)

– This vulnerability allows local attackers to escalate privileges on affected installations of npm cli.

Read More
NewsSecurity Vulnerabilities

Microsoft Windows Desktop Window Manager Use-After-Free Local Privilege Escalation Vulnerability (CVE-2026-20871)

– This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows.

Read More
NewsSecurity Vulnerabilities

Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities

CVE number CVE-2026-20026 and CVE-2026-20027 Multiple Cisco products are affected by vulnerabilities in the processing of Distributed Computing Environment Remote

Read More
NewsSecurity Vulnerabilities

Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability (CVE-2026-0759)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Katana Network Development Starter Kit.

Read More
NewsSecurity Vulnerabilities

gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability (CVE-2026-0755)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of gemini-mcp-tool.

Read More