CVE ID :CVE-2021-27137 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :An issue was discovered in router in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a…
CVE ID :CVE-2026-63087 Published : July 16, 2026, 5:16 p.m. | 1 hour, 52 minutes ago Description :Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the…
CVE ID :CVE-2026-63088 Published : July 16, 2026, 5:16 p.m. | 1 hour, 52 minutes ago Description :stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated network-accessible attackers to bypass the DNS-based IP blocklist by exploiting incomplete address…
Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows signs of being developed with assistance from a large language model (LLM), albeit with not so successful results. “While the AI…
CVE ID :CVE-2026-62948 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into through src statefiles_write_state6()…
CVE ID :CVE-2026-62389 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :ws before 8.21.1 contains a memory exhaustion vulnerability in lib where the fragment guard only triggers when fragment count reaches maxFragments, allowing attackers to exhaust memory…
CVE ID :CVE-2026-59258 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows shared album editors to modify member roles without owner-only restrictions.…
CVE ID :CVE-2026-58660 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-drop endpoint) validates the caller’s role on the attacker-supplied project_id but…
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft…
CVE ID :CVE-2026-47304 Published : July 14, 2026, 6:45 p.m. | 14 minutes ago Description :None Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More