CVE ID :CVE-2026-15423 Published : Aug. 12, 2026, 6:05 p.m. | 16 minutes ago Description :GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions…
CVE ID :CVE-2026-73327 Published : Aug. 12, 2026, 6:05 p.m. | 17 minutes ago Description :Joomla 6.1.1 contains a path traversal vulnerability in the com_joomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory…
CVE ID :CVE-2026-69106 Published : Aug. 12, 2026, 5:48 p.m. | 33 minutes ago Description :A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content. Severity: 8.8 | HIGH Visit the link for…
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and…
CVE ID :CVE-2026-17218 Published : Aug. 12, 2026, 5:35 p.m. | 47 minutes ago Description :IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write. Severity: 9.8 | CRITICAL Visit…
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERT-UA…
CVE ID :CVE-2026-69102 Published : Aug. 11, 2026, 6:04 p.m. | 11 minutes ago Description :MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that allows unauthenticated attackers to forge valid JWT tokens and authenticate…
CVE ID :CVE-2026-72713 Published : Aug. 11, 2026, 5:53 p.m. | 22 minutes ago Description :XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying…
CVE ID :CVE-2026-48413 Published : Aug. 11, 2026, 5:52 p.m. | 23 minutes ago Description :Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form…
CVE ID :CVE-2026-71362 Published : Aug. 11, 2026, 5:52 p.m. | 23 minutes ago Description :Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to…