X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability (CVE-2026-50263)
– This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server.
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Cisco Finesse Remote File Inclusion Vulnerability (CVE-2026-20175)
– A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks.
Read More
MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2026-10043)
CVE number – CVE-2026-10043 This vulnerability allows remote attackers to execute arbitrary code on affected installations of MosaicML Composer. User
Read More
Oracle PeopleSoft Remote Code Execution Vulnerability (CVE-2026-35273)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle PeopleSoft.
Read MoreCisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities
– Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.
Read MoreSamsung rlottie Numeric Truncation Remote Code Execution Vulnerability (CVE-2026-8916)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie.
Read MoreNVIDIA Transformers4Rec Model.load Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2026-24162)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec.
Read More
Microsoft Edge Origin Validation Error Security Bypass Vulnerability (CVE-2026-45492)
– This vulnerability allows remote attackers to access restricted functionality on affected installations of Microsoft Edge.
Read MoreASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability (CVE-2026-7480)
– This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager.
Read MoreCisco Webex Meetings Cross-Site Scripting Vulnerability (CVE-2026-20233)
– A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed.
Read More