-
Security advisories: CVE-2026-80212 and CVE-2026-80213
Posted by hsbt on 27 Aug 2026 Two vulnerabilities have been discovered in the gem bundled with Ruby. They have been assigned the CVE …
-
Top 6 HCI Vendors in Europe Compared for Enterprise Infrastructure Teams
Choosing the platform that will carry an enterprise through its next infrastructure cycle is an important but hard decision. Any European …
-
OpenAI explains how its naughty AI agents attacked Hugging Face
OpenAI has published its technical report detailing “the Hugging Face incident,” the compromise of the eponymous LLM repository by …
-
Smashing Security podcast #482: This hacker leaked GTA 6 – and launched their own cryptocurrency
Yes, exactly. I’ve seen …
-
OpenAI explains how its AI agents did crime and attacked Hugging Face
OpenAI has published its technical report detailing “the Hugging Face incident,” the compromise of the eponymous LLM repository by …
-
CVE-2026-81486 – A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this …
A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of the file …
-
CVE-2026-81485 – A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. …
A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function …
-
CVE-2026-19398 – “unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of …
“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local …
-
CVE-2026-81421 – A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The …
A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component …
-
CVE-2026-80183 – In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any …
In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role …
-
CVE-2026-47874 – The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single …
The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to …
-
CVE-2026-47863 – In Reactor Core, applications that use the Flux.bufferTimeout operator with …
In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service …
●●●
NVD
- CVE-2026-81486 – A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this …
- CVE-2026-47851 – Analyzing a PDF with a deeply nested or cyclic table of contents can cause a …
- CVE-2026-47852 – A local attacker on a multi-user host can pre-create the deterministic cache path and …
- CVE-2026-47850 – Spring Data REST does not preserve the persisted version (@Version) property of an …
- CVE-2026-47845 – In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP …
EXPLOITS
- CVE-2026-42167 – ProFTPD mod_sql post-authentication SQLi – RCE
- PCMan 2.0.7 – Buffer Overflow
- flyto-core 2.26.7 – Arbitrary File Write
- Nodemailer 9.0.0 – File Read/ SSRF
- NanaZip 6.5 – DoS
SECURELIST
- Exploits and vulnerabilities in Q2 2026
- The invisible passenger in your car
- APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
- Armored Likho expands its cyber-espionage toolkit
- Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver Pha