Aggregator

Currently trending CVE - Hype Score: 4 - Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to ...

A vulnerability identified as critical has been detected in henrygd beszel up to 0.18.3. Affected by this issue is the function PathEscape of the file /api/beszel/containers/logs of the component API Endpoint. This manipulation causes path traversal. This vulnerability is tracked as CVE-2026-27734. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability classified as problematic has been found in thorsten phpmyfaq up to 4.0.17. Affected is an unknown function of the file /api/webauthn/prepare of the component WebAuthn Prepare Endpoint. This manipulation causes missing authorization. This vulnerability appears as CVE-2026-27836. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Indico up to 3.3.10. It has been classified as critical. This affects an unknown function of the component API Endpoint. Performing a manipulation results in missing authentication. This vulnerability was named CVE-2026-28352. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability identified as problematic has been detected in nimiq core-rs-albatross up to 1.2.1. This issue affects some unknown processing. Performing a manipulation of the argument header.body_root results in improper validation of integrity check value. This vulnerability is identified as CVE-2026-28402. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Docker model-runner up to 1.0.15. Impacted is an unknown function of the file /engines/_configure of the component API. Executing a manipulation can lead to exposed dangerous routine. This vulnerability is tracked as CVE-2026-28400. The attack is restricted to local execution. No exploit exists. The affected component should be upgraded.

A vulnerability has been found in Zitadel up to 2.71.19/3.4.6/4.10.x and classified as problematic. Affected by this issue is some unknown functionality of the component Access Token Handler. Performing a manipulation of the argument token_id results in authentication bypass by assumed-immutable data. This vulnerability is identified as CVE-2026-27840. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Zitadel up to 3.4.6/4.10.x. The impacted element is an unknown function. Performing a manipulation results in missing authorization. This vulnerability is reported as CVE-2026-27946. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability marked as critical has been reported in VMware Workstation up to 25H1. This affects an unknown function. The manipulation leads to out-of-bounds write. This vulnerability is documented as CVE-2026-22716. The attack needs to be performed locally. There is not any exploit available. It is suggested to upgrade the affected component.

How Can Non-Human Identities Enhance Cybersecurity? Are your security strategies keeping up with the increasing complexity of digital? With cybersecurity challenges evolve, so do the measures to counter them. Among these advancements, the management of Non-Human Identities (NHIs) is proving crucial. NHIs, which combine machine identities with secured secrets such as encrypted passwords and tokens, […]

The post How does Agentic AI deliver value in cybersecurity appeared first on Entro.

The post How does Agentic AI deliver value in cybersecurity appeared first on Security Boulevard.

Are Non-Human Identities the Key to Scalable AI Security? How can organizations ensure their AI security solution stays scalable in evolving digital threats? The answer may lie in the effective management of Non-Human Identities (NHIs). With the increasing adoption of cloud solutions across industries, managing these machine identities becomes paramount. In sectors such as financial […]

The post Is your AI security solution scalable for future challenges appeared first on Entro.

The post Is your AI security solution scalable for future challenges appeared first on Security Boulevard.

How Can Organizations Effectively Manage Non-Human Identities? What strategies can organizations implement to safeguard their digital assets against misuse of Non-Human Identities (NHIs)? The journey to securing cloud environments against such threats begins with understanding how NHIs operate within cybersecurity frameworks. NHIs, essentially machine identities, serve as the backbone of secure communication and operations in […]

The post How to maintain control over your AI and its actions appeared first on Entro.

The post How to maintain control over your AI and its actions appeared first on Security Boulevard.

Is Your AI Security Integrity Robust Enough? Where artificial intelligence is increasingly utilized across diverse sectors, the question of AI security integrity often comes to the forefront. When organizations integrate AI into their operations, ensuring safety and security becomes paramount. This is where the management of Non-Human Identities (NHIs) and secret security management plays a […]

The post How can you be reassured about your AI’s security integrity appeared first on Entro.

The post How can you be reassured about your AI’s security integrity appeared first on Security Boulevard.

Currently trending CVE - Hype Score: 4 - SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be ...

A vulnerability has been found in Cisco NX-OS and classified as problematic. The impacted element is an unknown function of the component ACI Mode. Performing a manipulation results in uncontrolled memory allocation. This vulnerability is known as CVE-2026-20048. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Cisco Firepower Extensible Operating System, Secure Firewall Adaptive Security Appliance Software and Unified Computing System and classified as critical. This affects an unknown function. Executing a manipulation can lead to os command injection. This vulnerability is handled as CVE-2026-20099. It is possible to launch the attack on the local host. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Cisco Catalyst SD-WAN Manager. It has been classified as critical. This impacts an unknown function. The manipulation leads to incorrect use of privileged apis. This vulnerability is uniquely identified as CVE-2026-20122. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as problematic was found in OpenFUN Richie. The impacted element is the function sync_course_run_from_request of the file src/richie/apps/courses/api.py. Such manipulation leads to improper verification of cryptographic signature. This vulnerability is documented as CVE-2026-26717. The attack can be executed remotely. There is not any exploit available. Applying a patch is advised to resolve this issue.

A vulnerability was found in Linksys MR9600 and MX4200 and classified as critical. Affected by this vulnerability is an unknown functionality of the component TLS-SRP Connection Handler. The manipulation results in os command injection. This vulnerability is known as CVE-2026-27849. It is possible to launch the attack remotely. No exploit is available.