Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Ubiquiti UniFi Connect EV Station Lite WiFi AutoLink Improper Access Control Vulnerability (CVE-2026-21635)

CVE number = CVE-2026-21635 An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station

Read More
NewsSecurity Vulnerabilities

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2025-14847)

– Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client.

Read More
NewsSecurity Vulnerabilities

Hemmelig SSRF Filter bypassed in Secret Request functionality (CVE-2025-69206)

– Prior to version 7.3.3, a Server-Side Request Forgery (SSRF) filter bypass vulnerability exists in the webhook URL validation of the Secret Requests feature.

Read More
NewsSecurity Vulnerabilities

Nest.JS Fastify URL Encoding Middleware Bypass Vulnerability (CVE-2025-69211)

CVE number = CVE-2025-69211 Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a

Read More
NewsSecurity Vulnerabilities

Net-SNMP SnmpTrapd Agent Message Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-68615)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Net-SNMP.

Read More
NewsSecurity Vulnerabilities

WatchGuard Firebox iked Out of Bounds Write Vulnerability (CVE-2025-14733)

– An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code.

Read More
NewsSecurity Vulnerabilities

Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability (CVE-2025-53503)

CVE number = CVE-2025-53503 This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Cleaner One

Read More
NewsSecurity Vulnerabilities

Foxit PDF Reader PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-66499)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader.

Read More
NewsSecurity Vulnerabilities

Apple Safari JavaScriptCore HashTable Expansion Integer Overflow Remote Code Execution Vulnerability (CVE-2025-43501)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari.

Read More
NewsSecurity Vulnerabilities

Fortinet FortiWeb ApacheCookie_parse Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability (CVE-2025-64447)

– This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiWeb.

Read More