Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Critical Team Password Manager Vulnerability Allows Account Takeover (CVE-2026-84699)

– A critical security vulnerability in Team Password Manager could allow unauthenticated attackers to take control of user accounts through the application’s password reset process.

Read More
NewsSecurity Vulnerabilities

Critical AshSqlite Vulnerability Could Expose Hidden JSON Data (CVE-2026-77846)

– A newly disclosed vulnerability in AshSqlite could allow attackers to access sensitive information hidden inside JSON data, potentially exposing fields that an application was never intended to make publicly available.

Read More
NewsSecurity Vulnerabilities

Chinese-Made ZBT Routers Found Containing Two Hidden Backdoors

– Security researchers have uncovered two previously undocumented backdoors hidden inside the firmware of a range of Chinese-made ZBT routers, potentially allowing unauthenticated attackers to gain root-level access to affected devices.

Read More
NewsSecurity Vulnerabilities

Windows Security Flaw Could Enable NTLM Spoofing Attacks (CVE-2026-50508)

– Microsoft has patched a newly disclosed Windows vulnerability that could allow attackers to expose sensitive authentication information and potentially carry out network spoofing attacks.

Read More
NewsSecurity Vulnerabilities

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVE-2026-13126)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader.

Read More
NewsSecurity Vulnerabilities

Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability (CVE-2026-64715)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari.

Read More
NewsSecurity Vulnerabilities

NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability (CVE-2026-27654)

CVE number – CVE-2026-27654 This vulnerability allows remote attackers to execute arbitrary code on affected installations of NGINX. Authentication is

Read More
NewsSecurity Vulnerabilities

VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities

– CVE numbers – CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709

Read More
NewsSecurity Vulnerabilities

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability (CVE-2026-20232)

– A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.

Read More
NewsSecurity Vulnerabilities

Cisco Unified Intelligence Center SQL Injection Vulnerability (CVE-2026-20327)

– A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device.

Read More