Automated cyber signal feeds.
CVE ID :CVE-2026-6406 Published : May 22, 2026, 6:32 p.m. | 48 minutes ago Description :The Docker CLI –use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless…
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks, data theft, scanning, and denial-of-service attacks. The disruption of First VPN…
CVE ID :CVE-2026-9255 Published : May 22, 2026, 4:38 p.m. | 2 hours, 42 minutes ago Description :Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands,…
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets…
CVE ID :CVE-2026-48248 Published : May 21, 2026, 6:16 p.m. | 59 minutes ago Description :Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for…
CVE ID :CVE-2026-48249 Published : May 21, 2026, 6:16 p.m. | 59 minutes ago Description :Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for…
CVE ID :CVE-2026-48242 Published : May 21, 2026, 6:16 p.m. | 59 minutes ago Description :Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed…
CVE ID :CVE-2026-48246 Published : May 21, 2026, 6:16 p.m. | 59 minutes ago Description :Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for…
CVE ID :CVE-2026-48247 Published : May 21, 2026, 6:16 p.m. | 59 minutes ago Description :Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for…
CVE ID :CVE-2026-20223 Published : May 20, 2026, 5:16 p.m. | 1 hour, 55 minutes ago Description :A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the…