CVE ID :CVE-2026-18245 Published : July 30, 2026, 6:13 p.m. | 32 minutes ago Description :Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD…
CVE ID :CVE-2026-12943 Published : July 30, 2026, 5:57 p.m. | 47 minutes ago Description :IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to…
CVE ID :CVE-2026-54722 Published : July 30, 2026, 5:16 p.m. | 1 hour, 28 minutes ago Description :DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src strips the…
CVE ID :CVE-2026-12940 Published : July 30, 2026, 5:16 p.m. | 1 hour, 28 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher.…
CVE ID :CVE-2026-12935 Published : July 29, 2026, 6:20 p.m. | 19 minutes ago Description :The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a…
CVE ID :CVE-2026-59901 Published : July 29, 2026, 6:16 p.m. | 22 minutes ago Description :Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the `Bzip2Decoder` handler in Netty’s compression codec pipeline is vulnerable to a…
CVE ID :CVE-2026-41939 Published : July 29, 2026, 6:16 p.m. | 22 minutes ago Description :Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by…
CVE ID :CVE-2026-18236 Published : July 29, 2026, 6:16 p.m. | 22 minutes ago Description :A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into…
CVE ID :CVE-2026-14529 Published : July 29, 2026, 6:15 p.m. | 24 minutes ago Description :IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server – Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when…
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-round AES-128. The HAWK attack exploits a previously unused symmetry in the lattice behind the signature scheme.…