News & Sicurezza

CVE ID :CVE-2026-6764 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6761 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6766 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6765 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6768 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6767 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6770 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6769 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6760 Published : April 21, 2026, 1:16 p.m. | 49 minutes ago Description :Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are passed directly to shell_exec() without sanitization or escaping. An authenticated user with a valid bearer token can send a GraphQL moduleOperations mutation with backtick-wrapped commands in the module field to execute arbitrary commands on the underlying host as the web server user.

Critical 9.8 RCE Threat to SGLang AI Infrastructure A critical remote code execution (RCE) vulnerability has been uncovered in SGLang, a popular open-source framework used to serve advanced models like DeepSeek and Mistral. The flaw, officially tracked ... Read more Published Date: Apr 21, 2026 (1 day, 15 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-5760 CVE-2026-22679 CVE-2025-33244

CISA Warns of Cisco Catalyst SD-WAN Manager Vulnerabilities Exploited in Attacks CISA has added three critical Cisco Catalyst SD-WAN Manager vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies and organizations to act immediately. All thre ... Read more Published Date: Apr 21, 2026 (1 day, 15 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-34197 CVE-2026-20133 CVE-2026-20128 CVE-2026-20122