Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Critical Code Injection Vulnerability Found in Tinypool (CVE-2026-104849)

– A critical security vulnerability has been discovered in Tinypool, a lightweight Node.js worker-thread pool used by applications to run JavaScript tasks across worker threads.

Read More
NewsSecurity Vulnerabilities

KeyShot Vulnerability Could Allow Remote Code Execution (CVE-2026-92202)

– A security vulnerability in Luxion KeyShot could allow attackers to execute arbitrary code on a vulnerable computer by exploiting the way the application processes BIP files.

Read More
NewsSecurity Vulnerabilities

WatchGuard Fireware OS Vulnerability Could Allow Remote Code Execution (CVE-2026-18145)

– A high-severity security vulnerability in WatchGuard Fireware OS could allow an authenticated administrator to crash the spamBlocker service or potentially execute arbitrary code on affected Firebox devices.

Read More
NewsSecurity Vulnerabilities

Apple patches CVE-2026-86950 zero-day vulnerability used in targeted attacks

– Apple has released security updates for iPhone, iPad and Mac users after disclosing a serious vulnerability that could allow attackers to execute arbitrary code on affected devices.

Read More
NewsSecurity Vulnerabilities

Critical Kyverno flaw could allow Kubernetes tenants to gain cluster administrator access

– A critical security vulnerability in Kyverno could allow users with limited permissions in a Kubernetes namespace to escalate their privileges and potentially gain cluster administrator access.

Read More
NewsSecurity Vulnerabilities

Critical security vulnerability in F5 BIG-IP Access Policy Manager (CVE-2026-94127)

– A critical security vulnerability in F5 BIG-IP Access Policy Manager (APM) is being exploited in the wild, potentially allowing attackers to remotely execute malicious code on vulnerable systems.

Read More
NewsSecurity Vulnerabilities

Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability (CVE-2026-96417)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark.

Read More
NewsSecurity Vulnerabilities

Stored XSS in AIL Framework (CVE-2026-100176)

– A new Stored Cross-Site Scripting (XSS) vulnerability, CVE-2026-100176, has been disclosed in the AIL Framework. The flaw resides within the platform’s username timeline feature.

Read More
NewsSecurity Vulnerabilities

Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability (CVE-2026-19772)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader.

Read More
NewsSecurity Vulnerabilities

Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2026-91826)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie.

Read More