Aggregator

Submit #897266 / VDB-399313

Submit #897264 / VDB-399351

Submit #897250 / VDB-399350

Submit #897249 / VDB-399349

A vulnerability marked as problematic has been reported in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2026-86212. The attack is possible to be carried out remotely. Moreover, an exploit is present. To fix this issue, it is recommended to deploy a patch.

Anthropic旗下Claude登陆CarPlay平台Anthropic为Claude iOS应用增加了CarPlay集成，这意味着Claude用户可以通过他们的车载信息娱乐系统与Claude对话。

Submit #896623 / VDB-399348

A vulnerability labeled as critical has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of the argument username/password can lead to sql injection. This vulnerability is handled as CVE-2026-86211. The attack can be executed remotely. Additionally, an exploit exists.

Разбираем популярные заблуждения о браузерной безопасности и HTTP-методах.

Attackers are exploiting two new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the U.S. and Europe. Attackers are exploiting two recelty disclosed PaperCut flaws, CVE-2026-81578 and CVE-2026-82078, in attacks targeting schools and other education organizations in the U.S. and Europe, as reported by TheHackerNews. Arctic Wolf researchers observed threat […]

Новая система ПВО должна сама находить, распознавать и поражать рои беспилотников быстрее оператора.

Submit #897074 / VDB-399347

GoProxy is a library to create a customized HTTP/HTTPS proxy server usingGo (aka Golang), wi

A vulnerability labeled as very critical has been found in Red Hat Multicluster Engine for Kubernetes. Affected by this vulnerability is an unknown functionality of the component ClusterCurator controller. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-10059. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as very critical, has been found in Red Hat Multicluster Engine for Kubernetes. The impacted element is the function CreateJob of the component cluster-curator-controller. Performing a manipulation of the argument spec.install.overrideJob results in improper privilege management. This vulnerability is reported as CVE-2026-73268. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as very critical has been found in Red Hat Multicluster Engine for Kubernetes. The affected element is an unknown function of the component cluster-curator-controller. Performing a manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-73269. The attack is only possible with local access. There is not any exploit available.

A vulnerability categorized as critical has been discovered in Red Hat Multicluster Engine for Kubernetes. Affected is an unknown function of the component provider-credential-controller. Executing a manipulation of the argument copiedFrom can lead to authorization bypass. This vulnerability appears as CVE-2026-19130. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as very critical has been detected in Red Hat Multicluster Engine for Kubernetes. Impacted is an unknown function of the component clusterclaims-controller. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-73266. The attack may be initiated remotely. There is no available exploit.

A vulnerability marked as problematic has been reported in Elastic Kibana up to 8.19.19/9.4.4. The affected element is an unknown function. The manipulation leads to missing authorization. This vulnerability is listed as CVE-2026-72664. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.