CVE ID :CVE-2026-57851 Published : July 7, 2026, 5:16 p.m. | 1 hour, 48 minutes ago Description :MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory…
CVE ID :CVE-2026-13020 Published : July 7, 2026, 5:16 p.m. | 1 hour, 48 minutes ago Description :A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote,…
An Iranian hacking group affiliated with Iran’s Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singled out IT providers and…
CVE ID :CVE-2026-48614 Published : July 6, 2026, 6:16 p.m. | 43 minutes ago Description :An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and…
A use-after-free bug in Linux’s KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed ‘Januscape’ and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code…
CVE ID :CVE-2026-48316 Published : July 6, 2026, 5:16 p.m. | 1 hour, 44 minutes ago Description :ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of…
CVE ID :CVE-2026-40141 Published : July 6, 2026, 5:16 p.m. | 1 hour, 44 minutes ago Description :A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient…
CVE ID :CVE-2026-9085 Published : July 5, 2026, 3:16 p.m. | 3 hours, 34 minutes ago Description :Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control:…
CVE ID :CVE-2026-59509 Published : July 5, 2026, 1:16 p.m. | 5 hours, 34 minutes ago Description :An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected…
CVE ID :CVE-2026-14721 Published : July 5, 2026, 8:16 a.m. | 10 hours, 34 minutes ago Description :A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase_5g of the component Web…