Vulnerabilities
View allCloud Security
View allPrivate Endpoint Evaluation Framework for Cloud Security
Cloud Security ·
Stop Overprivileged Cloud Identities From Compromising Your Home
Cloud Security ·
Cloud Identity Governance for Remote Teams: Secure Access From Anywhere
Cloud Security ·
Evaluate Cloud Landing Zones: 6 Critical Questions for Secure Foundations
Cloud Security ·
The latest
FRRouting 8.4+ BGP Double-Free Crash Vulnerability CVE-2026-120221
Vulnerabilities ·
A high-severity flaw in FRRouting allows remote attackers to crash BGP sessions by triggering a double-free memory error during neighbor disconnections.
SignDrop Exploit Targets Windows CLFS Driver for SYSTEM Privilege Escalation
Vulnerabilities ·
A proof-of-concept exploit named SignDrop abuses the Common Log File System driver to gain SYSTEM access, with no patch available as of November 2026.
Azul Payara Critical CVE-2026-110003 Enables Remote Command Execution via X-GlassFish-authToken
Vulnerabilities ·
A critical flaw in Azul Payara allows remote attackers to bypass authentication checks and execute administrative commands on vulnerable servers.
BACnet Stack Fixes Stack-Based Out-of-Bounds Write in CVE-2026-47258
Vulnerabilities ·
Security teams must update BACnet Stack libraries to patched versions to address a high-severity memory corruption flaw in notification handling.
pgEdge Control Plane Patch Fixes Hard-Coded Trust Authentication Flaw
Vulnerabilities ·
A high-severity flaw in pgEdge Control Plane versions up to 0.10.1 allows local users to access Postgres databases without credentials. Version 0.11.0 resolves the issue.
pgEdge RAG Server Patch Fixes Unauthenticated Resource Exhaustion Flaw
Vulnerabilities ·
Version 2.0.0 addresses a high-severity denial-of-service vulnerability in the search component that allowed attackers to exhaust server resources.
Joomla jDownloads Extension SSRF Vulnerability Exposes Internal Networks
Vulnerabilities ·
A high-severity server-side request forgery flaw in jDownloads versions below 4.1.8 allows attackers to bypass URL validation and access internal resources.
PapaParse 5.7.1 Fixes Remote Denial of Service in CSV Parser Library
Vulnerabilities ·
A quadratic complexity flaw in PapaParse allows unauthenticated attackers to exhaust CPU resources. Version 5.7.1 addresses the issue.
Masterstudy WordPress Theme Privilege Escalation Flaw Affects Versions Up to 4.8.151
Vulnerabilities ·
A high-severity authorization flaw in the Masterstudy theme allows low-level users to gain admin access without a vendor fix.
Synology DSM SQL Injection Flaw Allows Remote File Access via LDAP
Vulnerabilities ·
A high-severity SQL injection bug in Synology DiskStation Manager lets attackers with compromised directory servers read or write files and crash systems.
Philips Hue Bridge Pro Authentication Bypass Allows Unauthenticated Access
Vulnerabilities ·
A high-severity flaw in the Philips Hue Bridge Pro lets nearby attackers skip login checks, exposing the system to unauthorized access.
Fortinet FortiAnalyzer and FortiManager Vulnerability CVE-2026-126217
Vulnerabilities ·
A high-severity authorization flaw in multiple Fortinet management products allows authenticated admins to bypass controls and escalate privileges.
Heym Run Patch Fixes Command Injection Flaw in Agentic Systems Platform
Vulnerabilities ·
The vendor released version 0.0.75 to fix a high-severity command injection flaw that allowed authenticated users to execute arbitrary code on backend hosts.
Node.js Issues November 2026 Security Releases to Address Multiple Vulnerabilities
Vulnerabilities ·
The Node.js project has released new versions to address security vulnerabilities.