CVE ID :CVE-2026-14529 Published : July 29, 2026, 6:15 p.m. | 24 minutes ago Description :IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server – Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when…
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-round AES-128. The HAWK attack exploits a previously unused symmetry in the lattice behind the signature scheme.…
CVE ID :CVE-2026-48391 Published : July 28, 2026, 5:58 p.m. | 31 minutes ago Description :Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…
CVE ID :CVE-2026-48390 Published : July 28, 2026, 5:58 p.m. | 31 minutes ago Description :Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write…
CVE ID :CVE-2026-7769 Published : July 28, 2026, 5:58 p.m. | 31 minutes ago Description :IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and…
CVE ID :CVE-2026-48395 Published : July 28, 2026, 5:58 p.m. | 31 minutes ago Description :Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could…
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence (AI) agents. The 37-member group spans cloud, security, enterprise software, and AI companies,…
CVE ID :CVE-2026-59239 Published : July 27, 2026, 5:56 p.m. | 27 minutes ago Description :Stored Cross-site Scripting (CWE-79) in the email module in Roskus Prospero Flow CRM before 5.4.4 allows a remote, authenticated low-privileged user to execute arbitrary JavaScript in…
CVE ID :CVE-2026-66729 Published : July 27, 2026, 5:16 p.m. | 1 hour, 6 minutes ago Description :facil.io through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by…
CVE ID :CVE-2026-66730 Published : July 27, 2026, 5:16 p.m. | 1 hour, 6 minutes ago Description :facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser that allows an unauthenticated remote attacker to permanently freeze worker processes at…