#flaw


Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

Oct 7, 2026 // 18:44

A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the […]

Hackers exploit critical Atlassian flaw after public PoC release

Oct 7, 2026 // 15:56

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. Earlier […]

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

Oct 7, 2026 // 14:56

SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances. Tracked as CVE-2026-102255, the vulnerability was found in […]

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Oct 7, 2026 // 14:54

Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under […]

Atlassian warns of critical file-access flaw in Jira, Confluence

Oct 7, 2026 // 12:37

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including […]

Ninja Forms plugin flaw exploited to hack WordPress sites

Oct 7, 2026 // 12:36

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and […]

New Dell System Update flaw lets hackers gain root privileges

Oct 6, 2026 // 12:57

Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. DSU lets enterprise IT […]

Rejetto HFS servers now actively scanned for critical RCE flaw

Oct 6, 2026 // 12:57

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution […]

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes

Oct 6, 2026 // 12:48

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain […]

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

Oct 6, 2026 // 12:47

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in […]

Previous 1 2 3 4 … 60 Next