Vulnerabilities
Privasys Go Patch Fixes Critical RA-TLS Certificate Relay Vulnerability
A critical flaw in Privasys Go allowed attackers to relay enclave certificates across sessions. The vendor has released a fix in version 0.5.1.
Vulnerabilities
Vulnerabilities
Privasys Enclave OS Virtual Patched Critical TLS Relay Vulnerability
A critical flaw in Privasys Enclave OS Virtual allowed attackers to relay attestation quotes, compromising confidential VM security.
Vulnerabilities
Privasys ra-tls-clients 0.5.0 Fixes Critical Remote Attestation Relay Flaw
A critical vulnerability in Privasys remote attestation TLS clients allowed attackers to relay quotes, bypassing security checks in versions prior to 0.5.0.
Vulnerabilities
SonicWall Releases Hotfixes for CVSS 10.0 Pre-Auth SSRF in SMA1000 Appliances
SonicWall has issued hotfixes for four security flaws in its SMA1000 remote access appliances, including a pre-authentication SSRF vulnerability rated 10.0.
Vulnerabilities
Ramp Raises $1.85B at $60B Valuation Led by Dragoneer and Thrive Capital
Fintech startup Ramp secures massive funding round, marking a significant valuation jump from its previous June raise, according to Bloomberg sources.
Vulnerabilities
Critical TLS Flaw in Privasys rustls Allows Quote Relay Attacks
A critical vulnerability in the Privasys rustls library allows attackers to relay enclave quotes, compromising attestation integrity until version 0.8.1.
Vulnerabilities
Wizarr Server Critical Flaw Allows Remote Code Execution via Wizard Bundles
A critical vulnerability in Wizarr media server management software enables attackers to run arbitrary Python code and OS commands.
Vulnerabilities
Privasys Fixes Critical TLS Relay Flaw in Enclave OS Mini SGX Runtime
A missing TLS session binding in Privasys Enclave OS Mini allowed attackers to relay quotes and impersonate attested enclaves.
Vulnerabilities
Vikunja Patch Fixes Plaintext Token Storage Vulnerability CVE-2026-62376
Version 2.4.0 of the self-hosted task manager Vikunja resolves a high-severity flaw where plaintext tokens allowed full account takeover if database access was compromised.
Vulnerabilities
TinaCMS CLI high-severity injection flaw fixed in version 3.0.0
A crafted Git branch name can inject JavaScript into TinaCMS CLI builds, allowing attackers to steal credentials or alter deployment artifacts before version 3.0.0.
Vulnerabilities
TinaCMS Patch Fixes Critical Auth Bypass in Admin Preview Route
A critical vulnerability in TinaCMS allows attackers to hijack editor sessions via crafted links, but a patch is now available for affected versions.
Vulnerabilities
Vikunja 2.4.0 patches high-severity OAuth token privilege bypass
A flaw in the self-hosted task manager allowed limited API tokens to escalate privileges by minting unrestricted session credentials.
Vulnerabilities
Astron Agent Critical Flaw Allows Low-Privilege Users to Execute Code as Root
A critical vulnerability in Astron Agent versions prior to 1.1.2 enables authenticated users to bypass tenant isolation and execute arbitrary code with root privileges.
Vulnerabilities
AI Developer Launches Open Source Clones of Adobe Creative Cloud
An ambitious project aims to replace Adobe’s paid software suite with free, AI-generated alternatives that are currently unfinished.
Vulnerabilities
Researchers exploit 45 zero-days at Pwn2Own Ireland 2026
Security teams claimed $232,500 in cash prizes after finding 45 unique vulnerabilities during the second day of the Pwn2Own Ireland 2026 competition.
Vulnerabilities
Working exploit published for pre-auth AnyDesk Linux root flaw
Researchers released code for an unauthenticated remote code execution bug in AnyDesk Linux that grants root access, though a patch is available.
Vulnerabilities
AWS Advises on CVE-2026-5190: Stack Buffer Overflow in C Event Stream Decoder
Amazon Web Services has issued a security bulletin regarding a stack buffer overflow vulnerability in its C Event Stream Streaming Decoder.
Vulnerabilities
Vikunja Task Management App Patched for Critical IDOR Vulnerability
A critical flaw in Vikunja allowed attackers to view private kanban boards via share links, exposing user data until version 2.4.0.
Vulnerabilities
16 Malicious Firefox Extensions Impersonate Rabby and OKX Wallets to Steal Keys
Researchers identified 16 fake browser add-ons that intercept cryptocurrency wallet secrets during import processes.
Vulnerabilities
AWS patches two vulnerabilities in Ops Wheel affecting cloud infrastructure
Amazon Web Services released security bulletins for CVE-2026-6911 and CVE-2026-6912, addressing issues in its Ops Wheel service.
Vulnerabilities
AWS Discloses Out-of-Bounds Write Vulnerability in Firecracker virtio-pci Transport
AWS has published a security bulletin detailing CVE-2026-5747, an out-of-bounds write flaw in the Firecracker microvm manager’s virtio-pci transport component.
Vulnerabilities
AWS Alerts Users to Critical Sandbox Bypass in QnABot Service
A new advisory from Amazon Web Services details a high-severity vulnerability allowing arbitrary code execution through a sandbox escape.
Vulnerabilities
AWS Advisories on CVE-2026-7461 OS Command Injection in ECS Agent
Amazon Web Services disclosed a command injection flaw in the ECS Agent that affects users with FSx Windows File Server volumes.
Vulnerabilities
AWS Advises of Remote Code Execution Flaw in Amazon Redshift JDBC Driver
A vulnerability in the Amazon Redshift JDBC driver allows remote code execution through unsafe class loading, posing risks to connected applications.