Tag: vulnerability

Security Research Reveals Critical Unitree G1 EDU Root RCE Vulnerabilities

Security researcher Olivier Laflamme has disclosed two critical vulnerabilities affecting the Unitree G1 EDU humanoid robot that could allow root remote code execution through network and Bluetooth attack paths.

ServiceNow Releases Fixes For Four AI Platform Security Vulnerabilities

ServiceNow has patched four vulnerabilities affecting its AI Platform, including three critical flaws rated CVSS 10.0 that could allow unauthenticated attackers to execute code or SQL statements.

CISA Warns Of Active Exploitation Of Critical Gitea Remote Code Execution Flaw

CISA adds the critical Gitea remote code execution vulnerability CVE 2026 60004 to its Known Exploited Vulnerabilities catalog following reports of active exploitation.

GitLab Vulnerability CVE-2026-19478 Exploited Soon After Disclosure

GitLab CVE-2026-19478 is being actively exploited after disclosure, allowing unauthenticated attackers to modify or delete public projects under certain conditions.

Critical SAP Commerce Cloud Flaw CVE 2026 58231 Draws Early Exploitation Activity

Security researchers have observed exploitation attempts targeting SAP Commerce Cloud vulnerability CVE 2026 58231 only days after SAP released a patch for the critical remote code execution flaw.

Active Exploitation Attempts Detected Against Unpatched GeoServer SQL Injection Flaw

Security researchers warn that a newly disclosed GeoServer zero day SQL injection vulnerability is being actively targeted and could lead to remote code execution on vulnerable systems.

SAP Releases Security Updates For Critical Commerce Cloud And NetWeaver Vulnerabilities

SAP has released security patches for multiple critical vulnerabilities, including a maximum severity flaw in Commerce Cloud that could allow unauthenticated attackers to execute arbitrary code.

Metabase Releases Security Updates After Zero Day Vulnerability Grants Unauthorized Administrator Access

Metabase has released security updates after confirming active exploitation of a zero day vulnerability that allows attackers to gain administrator access without authentication.

Critical Security Updates Released For Veeam Terraform MCP Server And Django

HashiCorp, Veeam, and Django have released security updates addressing 11 vulnerabilities, including critical flaws affecting Terraform MCP Server, Veeam Service Provider Console, and GeoDjango.

cPanel Releases Security Updates For Critical Database And Server Vulnerabilities

cPanel has patched a critical privilege escalation flaw alongside two additional security issues affecting database access, HTTP request handling, and Exim mail server components.

Adobe Releases Security Updates For Adobe Campaign Classic And Adobe Bridge Flaws

Adobe has released security updates for Adobe Campaign Classic and Adobe Bridge, addressing critical vulnerabilities that could allow arbitrary code execution, privilege escalation, and file system access.

CISA Adds Exploited Microsoft SharePoint CVE 2026 58644 Zero Day To Known Exploited Vulnerabilities Catalog

CISA has added the actively exploited Microsoft SharePoint vulnerability CVE 2026 58644 to its Known Exploited Vulnerabilities catalog and urged organizations to apply security updates immediately.

Recent articles

spot_img