CVE ID :CVE-2026-13164 Published : June 24, 2026, 3:37 p.m. | 3 hours, 55 minutes ago Description :Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a…
CVE ID :CVE-2026-56121 Published : June 24, 2026, 2:49 p.m. | 4 hours, 43 minutes ago Description :Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request…
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were…
CVE ID :CVE-2026-12958 Published : June 23, 2026, 4:03 p.m. | 3 hours, 24 minutes ago Description :Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a…
CVE ID :CVE-2026-12957 Published : June 23, 2026, 4:02 p.m. | 3 hours, 24 minutes ago Description :Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If a…
Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked…
President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography. Key establishment must move by December 31, 2030; digital signatures by December 31, 2031. EO 14409 leaves…
CVE ID :CVE-2026-53779 Published : June 22, 2026, 6:22 p.m. | 55 minutes ago Description :WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMG_PATH directory by sending…
Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with the official release channels and push backdoor code. “Attackers compromised the vendor’s build and distribution pipeline, injecting backdoor code into…
CVE ID :CVE-2026-11834 Published : June 22, 2026, 5:53 p.m. | 1 hour, 24 minutes ago Description :A command injection vulnerability has been identified in the DHCP option processing logic in multiple TP-Link router models, due to insufficient validation of externally supplied…