Microsoft Windows Desktop Window Manager Use-After-Free Local Privilege Escalation Vulnerability (CVE-2026-20871)
– This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows.
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities
CVE number CVE-2026-20026 and CVE-2026-20027 Multiple Cisco products are affected by vulnerabilities in the processing of Distributed Computing Environment Remote
Read More
Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability (CVE-2026-0759)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Katana Network Development Starter Kit.
Read More
gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability (CVE-2026-0755)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of gemini-mcp-tool.
Read More
Cisco Identity Services Engine Information Disclosure Vulnerability (CVE-2026-20029)
CVE number = CVE-2026-20029 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services
Read MorePanda3d Uncontrolled Format String Allows Stack Memory Disclosure (CVE-2026-22190)
CVE number = CVE-2026-22190 Panda3D versions up to and including 1.10.16 egg-mkfont contains an uncontrolled format string vulnerability. The -gp
Read More
Ubiquiti UniFi Connect EV Station Lite WiFi AutoLink Improper Access Control Vulnerability (CVE-2026-21635)
CVE number = CVE-2026-21635 An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station
Read More
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2025-14847)
– Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client.
Read More
Hemmelig SSRF Filter bypassed in Secret Request functionality (CVE-2025-69206)
– Prior to version 7.3.3, a Server-Side Request Forgery (SSRF) filter bypass vulnerability exists in the webhook URL validation of the Secret Requests feature.
Read More
Nest.JS Fastify URL Encoding Middleware Bypass Vulnerability (CVE-2025-69211)
CVE number = CVE-2025-69211 Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a
Read More