Aggregator

CVE-2026-15925 | Snowflake Connector for Python up to 4.7.0 Hostname Verification certificate host validation (EUVD-2026-44869)

Vuldb Updates
6 days 2 hours ago
A vulnerability identified as problematic has been detected in Snowflake Connector for Python up to 4.7.0. Affected by this issue is some unknown functionality of the component Hostname Verification. Performing a manipulation results in certificate with host mismatch. This vulnerability is cataloged as CVE-2026-15925. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance

Help Net Security
6 days 2 hours ago

On Wednesday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and four allied cyber authorities published a guide telling software vendors how to build a coordinated vulnerability disclosure (CVD) program. Six days earlier, CISA published a blog post explaining how a security researcher had tried and failed, repeatedly, to report a serious problem to CISA itself. Read side by side, the two documents suggest the timing is deliberate. The guidance Suppliers should design a CVD … More →

The post CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance appeared first on Help Net Security.

Zeljka Zorz

Millions of Shark Robot Vacuums Vulnerable to Unpatched Remote Code Execution Flaw

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
6 days 2 hours ago

Millions of internet-connected Shark robot vacuums may be vulnerable to a critical remote code execution (RCE) flaw that could allow attackers to control devices remotely, access onboard cameras, retrieve home maps, and potentially steal stored Wi-Fi credentials. An independent researcher disclosed this issue following a 90-day reporting period, and it arises from overly permissive AWS […]

The post Millions of Shark Robot Vacuums Vulnerable to Unpatched Remote Code Execution Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Managed ad