Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,782 stories synthesized.
Seven vulnerabilities, including command injection and stack-based buffer overflows, have been disclosed for the Edimax BR-6478AC router, all remotely exploitable with public exploit code already circulating.
Seven vulnerabilities, including a high-severity authentication bypass, have been disclosed in the open-source Open5GS 5G Core network software, with public exploits already released for all flaws.
Fifteen vulnerabilities, including 13 stack-based buffer overflows and 2 command injection flaws, have been disclosed for the end-of-life TRENDnet TEW-432BRP router, with public exploit code available and no firmware patches forthcoming.
This week's roundup covers active exploitation of FortiClient EMS and Trend Micro Apex One vulnerabilities, a high-severity SharePoint RCE patch, and a LinkedIn-themed phishing campaign abusing Adobe's A/B testing platform.
Eight unauthenticated high-severity vulnerabilities — seven SQL injections and one path-traversal — were disclosed together in Open ISES Tickets 3.30A, exposing ticketing servers to database theft and file exfiltration.
Public exploit code has been released for a critical remote code execution vulnerability in Flowise, a low-code platform for building LLM applications, putting unpatched self-hosted instances at immediate risk.
Armur AI released Pentest Swarm AI, the first open-source autonomous penetration testing platform using swarm intelligence to coordinate nmap, SQLMap, Burp Suite, and Metasploit via a stigmergic blackboard architecture.
Microsoft Threat Intelligence uncovered 33 malicious npm packages that exploit dependency confusion to deploy a reconnaissance payload targeting developer environments across nine organizational scopes.
A coordinated disclosure of 19 CVEs on May 29, 2026, reveals systemic authorization failures, hardcoded secrets, and unauthenticated RCE in the open-source PraisonAI multi-agent orchestration platform.
Nine vulnerabilities were disclosed on May 29, 2026, in the open-source Admidio membership management system, including IDOR bugs, missing CSRF protections, and an incomplete authorization fix that could leak SSO private keys.
Four vulnerabilities in the open-source FreeScout help desk platform were disclosed on May 29, 2026, including an email injection flaw that allows unauthenticated agent impersonation and two authorization bypass bugs affecting internal notes.
Rapid7's latest Metasploit release includes new modules for the DirtyFrag Linux kernel privilege escalation vulnerabilities, a Citrix NetScaler info leak scanner, and exploits for dompdf and a WordPress plugin.
JetBrains patched 11 security vulnerabilities in TeamCity on May 29, 2026, including a high-severity RCE via Perforce connection settings and an unauthenticated SSRF, all fixed in version 2026.1.
Threat actors are exploiting ChatGPT's share link feature to display fake OpenAI outage pages that trick users into downloading malware disguised as the ChatGPT desktop app.
Nine vulnerabilities, including three critical sandbox escapes, were disclosed in the vm2 Node.js library on May 29, 2026, with novel attack vectors via WebAssembly JSPI and Promise species.
Ten vulnerabilities, including a CVSS 10.0 hardcoded authentication secret and multiple command injection flaws, were disclosed in the self-hosted PaaS Dokploy on May 29, 2026, allowing unauthenticated admin takeover and full server compromise.
Three high-severity vulnerabilities were disclosed in the Gotenberg document conversion API on May 29, 2026, including a race condition that crashes the service, an SSRF deny-list bypass via crafted IPv6 addresses, and a path-traversal flaw in zip entry handling.
Rapid7 MDR observed exploitation of CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS and Prisma Access GlobalProtect, with attackers using cookie-based authentication to access internal networks.
Six vulnerabilities, including a CVSS 8.8 scope bypass in the Gateway chat.send route, have been disclosed in the open-source OpenClaw chat-ops platform, with patches available across four release versions.
DockSec, an open-source AI-powered Docker security analyzer adopted as an OWASP Incubator Project, correlates findings from Trivy, Hadolint, and Docker Scout to rank CVEs by real-world impact and generate plain-English fixes.
A new Flare report reveals the DDoS-as-a-service market has evolved from simple $5 attacks to sophisticated subscription-based platforms with customer support and reseller programs.
Nine security vulnerabilities were disclosed in the open-source AVideo platform on May 29, 2026, including a pre-auth shell injection (CVSS 8.8) and a wallet fraud bug that hardcodes payment success.
Researchers have demonstrated an exploit chain that chains over-permissioned roles, secrets discovery, and non-human identities to compromise a popular automation service, highlighting how minor cloud misconfigurations can cascade into full compromise.
Dutch police have dismantled a massive botnet comprising at least 17 million infected devices after seizing 200 servers from a hosting provider, following a tip from the National Cyber Security Centre (NCSC-NL).