Vulnerabilities and CVEs

05:58 Vulnerability

USN-8799-1: libssh2 vulnerabilities

CVE-2026-58050Ubuntu Security

01:13 Vulnerability

21st September – Threat Intelligence Report

Check Point Research

00:32 Exploited

Anthropic-linked CVEs pile up, attackers mostly shrug

The Register

00:24 Exploited

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

Ars Technica

22:20 Exploited

Roundcube security advisory (AV26-503) – Update 1

CVE-2026-48842Canadian Centre for Cyber Security

22:12 Exploited

Zyxel security advisory (AV26-603) – Update 1

CVE-2026-7273Canadian Centre for Cyber Security

22:12 Vulnerability

CISA alerts of active exploitation of three Linux kernel flaws

BleepingComputer

21:59 Vulnerability

Meta Muse AI app flaw lets local malware redirect dictation traffic

The Register

21:45 Patch

Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920

CVE-2024-53920oss-security

21:24 Patch

Veeam security advisory (AV26-513) – Update 1

CVE-2026-32996Canadian Centre for Cyber Security

20:32 Vulnerability

USN-8798-1: GStreamer Good Plugins vulnerabilities

CVE-2026-18295CVE-2026-18296Ubuntu Security

20:29 Patch

MISP security advisory (AV26-946)

Canadian Centre for Cyber Security

20:23 Vulnerability

WordPress Click2Shell flaw lets hackers execute PHP on the server

BleepingComputer

20:05 Vulnerability

USN-8797-1: GStreamer Base Plugins vulnerability

Ubuntu Security

19:21 Patch

MongoDB Security Advisory (AV26-945)

Canadian Centre for Cyber Security

19:16 Vulnerability

CVE-2026-86473: Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry

CVE-2026-86473oss-security

19:14 Vulnerability

CVE-2026-82355: Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation

CVE-2026-82355oss-security

19:12 Vulnerability

CVE-2026-75158: Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter

CVE-2026-75158oss-security

19:06 Patch

CVE-2026-94301: Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232

CVE-2026-94301CVE-2026-47065oss-security

19:04 Vulnerability

CVE-2026-47321: Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate

CVE-2026-47321oss-security