News & Sicurezza

CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE GitLab has issued an urgent security alert for organizations running self-hosted versions of its AI Gateway, warning of a critical vulnerability that could allow attackers to crash services or execute ... Read more Published Date: Feb 08, 2026 (1 day, 7 hours ago) Vulnerabilities has been mentioned in this article.

Apple’s Golden Jubilee: Foldables, “Synthetic” Siri, and the Rise of Tim Cook’s Successor As Apple approaches its momentous 50th anniversary on April 1, 2026, the global community watches with bated breath to discern its next strategic evolution. Beyond the allure of impending hardware, a ... Read more Published Date: Feb 08, 2026 (1 day, 8 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2021-44228

The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_login_register_ajax_create_final_user' function. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

BeyondTrust Remote Access Products 0-Day Vulnerability Allows Remote Code Execution BeyondTrust Remote Access Products 0-Day Vulnerability BeyondTrust has disclosed a critical pre-authentication remote code execution vulnerability affecting its Remote Support (RS) and Privileged Remo ... Read more Published Date: Feb 07, 2026 (2 days, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload of 1608 bytes to trigger a stack-based buffer overflow and execute commands through the registration key field.

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution with potential remote code execution.

Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) memory. Attackers can craft a malicious input in the 'Cyberoam Server Address' field to trigger a bind TCP shell on port 1337 with system-level access.

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.

What CISA KEV Is and Isn’t – and a Tool to Help Guide Security Teams A new paper gives an insider’s perspective into CISA’s Known Exploited Vulnerability catalog – and also offers a free tool to help security teams use the CISA KEV catalog more effectively. The paper, ... Read more Published Date: Feb 06, 2026 (2 days, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25049 CVE-2022-21894

CISA Adds SmarterMail and React Native CLI Flaws to KEV Catalog February 6, 2026U.S. CISA has escalated two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. CVE-2026-24423 in SmarterTools Sma ... Read more Published Date: Feb 06, 2026 (2 days, 17 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24423 CVE-2025-11953 CVE-2025-24813

Autoriteit Persoonsgegevens en Raad voor de rechtspraak gehackt via Ivanti-lek Aanvallers zijn erin geslaagd de Ivanti EPMM-server van de Autoriteit Persoonsgegevens (AP) en Raad voor de rechtspraak te hacken. In het geval van de AP hebben de aanvallers toegang gekregen tot werk ... Read more Published Date: Feb 06, 2026 (2 days, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1340 CVE-2026-1281