Automated cyber signal feeds.
CVE ID :CVE-2026-77236 Published : Aug. 21, 2026, 6:16 p.m. | 28 minutes ago Description :Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with…
CVE ID :CVE-2026-77235 Published : Aug. 21, 2026, 6:16 p.m. | 28 minutes ago Description :Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via…
CVE ID :CVE-2026-77237 Published : Aug. 21, 2026, 6:16 p.m. | 28 minutes ago Description :Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To…
CVE ID :CVE-2026-62677 Published : Aug. 21, 2026, 6:16 p.m. | 28 minutes ago Description :Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with…
CVE ID :CVE-2026-72852 Published : Aug. 20, 2026, 6:19 p.m. | 25 minutes ago Description :hank-ai/darknet sizes a convolutional layer’s weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib,…
CVE ID :CVE-2026-76641 Published : Aug. 20, 2026, 6:16 p.m. | 28 minutes ago Description :Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XML_ExternalEntityParserCreate. A…
CVE ID :CVE-2026-73256 Published : Aug. 20, 2026, 6:16 p.m. | 28 minutes ago Description :Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP reverse-proxy deployment by sending a request…
CVE ID :CVE-2026-73257 Published : Aug. 20, 2026, 6:16 p.m. | 28 minutes ago Description :Mongoose is an embedded web server and network library. Priro to version 7.22, a remote unauthenticated attacker can send an HTTP request containing both Content-Length and…
CVE ID :CVE-2026-73253 Published : Aug. 20, 2026, 6:16 p.m. | 28 minutes ago Description :Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can…
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier…