Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,561 stories synthesized.
A local privilege escalation vulnerability in Trend Micro Apex One's Virus Scan Engine allows attackers with low-privileged code execution to gain full SYSTEM access via a symbolic link attack on the VSApiNt.sys driver.
Trend Micro has released a patch for CVE-2025-71217, a local privilege escalation vulnerability in the Apex One Security Agent's TmSelfProtect component that allows low-privileged attackers to gain root access.
A high-severity denial-of-service vulnerability in Docker Desktop for Mac's Model Runner component allows local attackers with low-privileged guest code execution to crash the host system.
A critical authentication bypass vulnerability in Hewlett Packard Enterprise AutoPass License Server (CVE-2026-23600) allows remote attackers to gain unauthorized access without credentials.
Trend Micro has released a security update to fix a server-side request forgery vulnerability in Apex Central's Manual Update feature that could allow authenticated attackers to access internal network resources.
A critical directory traversal vulnerability in Trend Micro Apex One Console (CVE-2025-71211, CVSS 9.8) allows unauthenticated remote attackers to execute arbitrary code via TCP ports 8080 and 4343.
Trend Micro has released a patch for a server-side request forgery vulnerability in Apex Central Hub Server that could allow authenticated attackers to access internal network resources.
A local privilege escalation vulnerability in Trend Micro Apex One Security Agent's iCore service (CVE-2025-71214, CVSS 7.8) allows attackers with low-privileged code execution to gain root access.
A local privilege escalation vulnerability in Trend Micro Apex One Security Agent's cache mechanism allows attackers with low-privileged code execution to gain root access, with a patch now available.
A critical directory traversal vulnerability in Trend Micro Apex One, tracked as CVE-2025-71210 with a CVSS score of 9.8, allows unauthenticated remote attackers to execute arbitrary code on the console.
WatchTowr Labs has disclosed three pre-authentication vulnerabilities in SolarWinds Web Help Desk, including an RCE via deserialization, that allow unauthenticated remote code execution on fully patched instances.
Trail of Bits has released mquire, an open-source Linux memory forensics tool that extracts BTF type info and Kallsyms symbol addresses directly from memory dumps, enabling analysis of unknown or custom kernels without external debug symbols.
A critical command injection vulnerability in claude-hovercraft's executeClaudeCode method, tracked as CVE-2025-15060, allows unauthenticated remote attackers to execute arbitrary code with a CVSS score of 9.9.8.
A critical authentication bypass vulnerability in the Socomec DIRIS A-40 power monitoring device's HTTP API allows network-adjacent attackers to gain unauthorized access without credentials.
A cleartext transmission vulnerability in Ubiquiti Networks AI Pro cameras, disclosed as part of Pwn2Own, allows network-adjacent network-adjacent attackers to steal stored credentials without authentication.
A missing encryption protocol downgrade vulnerability in Ubiquiti Networks AI Pro cameras lets network-adjacent attackers weaken the discovery channel without authentication, earning a Pwn2Own prize.
Docker has released a fix for CVE-2026-2664, an out-of-bounds read information disclosure vulnerability in the grpcfuse kernel module of Docker Desktop, which could be chained with other flaws for kernel-level code execution.
A critical directory traversal vulnerability in IceWarp collaboration software allows unauthenticated remote attackers to read arbitrary files as root, with patches available in versions 14.2.0.12 and 14.1.0.20.
Siemens has released a security update for CVE-2026-25655, an uncontrolled search path element vulnerability in SINEC NMS that allows local attackers to escalate privileges to SYSTEM or LOCAL SERVICE.
A local privilege escalation vulnerability in Siemens SINEC NMS allows attackers with low-privileged attackers to gain SYSTEM access via an unsecured OpenSSL configuration file.
Ubiquiti Networks has patched a denial-of-service vulnerability in its AI Pro camera AI Pro devices, discovered during Pwn2Own Berlin 2026, that allows network-adjacent attackers to crash the system without authentication.
GitLab released versions 18.9.1, 18.8.5, and 18.7.5 on February 25, 2026, patching multiple high-severity vulnerabilities including an XSS flaw in the Mermaid sandbox and several denial-of-service issues.
The DFIR Report details an intrusion where threat actors exploited CVE-2023-46604 in Apache ActiveMQ to deploy LockBit ransomware, returning 18 days after initial eviction.
A vulnerability in the beta version of Docker Desktop MCP Server beta allows local attackers with low-privileged code execution to read stored credentials from cleartext configuration files.