Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability (CVE-2026-19772)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader.
Read MoreCyber Security
Articles on SystemTek’s website that relate to cyber security.
Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2026-91826)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie.
Read More
Critical Vulnerability Found in CISA Malcolm (CVE-2026-90456)
– A critical security vulnerability has been discovered in CISA’s Malcolm network traffic analysis platform that could expose an administrative interface to unauthorised attackers.
Read More
MCPHub Authentication Bypass Vulnerability (CVE-2026-90474)
– A newly disclosed security vulnerability in MCPHub could allow attackers to bypass authentication and gain unauthorised access to systems using vulnerable versions of the software.
Read More
TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability (CVE-2025-71414)
– This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent.
Read More
OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability (CVE-2026-19590)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenAI Codex.
Read MoreCritical AVideo Vulnerability Could Expose Password Hashes and Session Tokens (CVE-2026-86190)
– A newly disclosed security vulnerability in WWBN AVideo, an open-source video-sharing platform, could allow unauthenticated attackers to access sensitive information belonging to users and potentially hijack active sessions.
Read More
Grav CMS Vulnerability CVE-2026-86197 Could Allow Page Editors to Inject Malicious Scripts
– Tracked as CVE-2026-86197, the vulnerability is a cross-site scripting (XSS) flaw affecting Grav versions before 2.0.20. Security researchers have rated it Medium severity, with a CVSS 3.1 score of 5.4.
Read More
Critical SadTalker Vulnerability Could Allow Attackers to Execute Commands on Servers (CVE-2026-85696)
– A newly disclosed critical security vulnerability in the open-source SadTalker project could allow unauthenticated attackers to execute arbitrary operating system commands on vulnerable servers.
Read More
Cisco IP Phones Hit by High-Severity Denial-of-Service Vulnerability (CVE-2026-20281)
– Cisco has disclosed a high-severity vulnerability affecting a range of its IP and video phones that could allow an unauthenticated remote attacker to cause the devices to become unavailable.
Read More