A maximum-severity zero-day vulnerability in LiteSpeed’s User-End cPanel Plugin, tracked as CVE-2026-48172 with a CVSS score of...
Vulnerability
A critical security vulnerability has been disclosed in NGINX’s ngx_http_rewrite_module, one of the most widely deployed components in...
A highly critical SQL injection vulnerability in Drupal Core’s database abstraction API, tracked as CVE-2026-9082, is now...
A critical local privilege escalation (LPE) vulnerability was disclosed affecting Docker Desktop, tracked officially in vulnerability databases...
A newly disclosed critical vulnerability, tracked officially as CVE-2026-33712 and identified in the GitHub Advisory Database as...
A critical Cross-Site Request Forgery (CSRF) vulnerability impacting Best Practical’s Request Tracker (RT) software. Tracked under CVE-2026-41074...
A highly critical kernel vulnerability that could allow unprivileged local users to completely compromise affected systems. Tracked...
A disclosure of multiple security vulnerabilities in Apache Fory (specifically within its Python implementation, PyFory), a highly...
A high-severity flaw in Microsoft Defender to its Known Exploited Vulnerabilities (KEV) catalog. Designated as CVE-2026-41091, this...
A critical security advisory warning of a maximum-severity vulnerability within its Cisco Secure Workload platform. Disclosed on...