Security & Risk
143 analyses
CVE-2026-46242, 'Bad Epoll', allows any local unprivileged account to gain root access on Linux and Android servers with kernel 6.4 or higher. The fix has been available since April; most distributions have yet to publish the backport.
The Singapore Land Authority confirmed unauthorized access to a cloud environment managed by IBM, exposing names, NRIC numbers, and addresses of approximately 70,000 individuals stored since 1998 in a non-anonymized test dataset.
Researcher from the National University of Seoul has published a functional exploit for CVE-2026-46242: any local process without privileges can gain root access in Linux kernels 6.4 to 6.12 and on Android devices.
Remote code execution vulnerability patched by Microsoft on May 26 lingered for months without a fix on exposed servers. CISA added it to the KEV catalog on July 1, and The Hacker News detailed the attack on July 2.
Cato AI Labs released the DuneSlide on Wednesday, a pair of zero-click vulnerabilities in Cursor 3.0 that break the sandbox through instructions planted in MCP or web pages loaded by the agent.
Bulletin APSB26-68 fixes 11 CVEs, seven with a maximum rating, in ColdFusion 2025, ColdFusion 2023, and Campaign Classic 7.4.3. Adobe has given it a Priority Rating 1, a category in which the company estimates imminent exploitation.
CVE-2026-48558 allows for forged technician sessions and MFA bypass; the final payload, Djinn Stealer, targets MCP files with credentials from the code assistants Claude, Gemini, Codex, Cline, and Kilo.
JFrog identifies two hijacked npm packages and a cluster of 16 Go packages with a payload that triggers via VS Code's tasks.json and seeks instructions in Tron, Aptos, and BSC transactions.
Vulnerability in the libssh2 packet parser gained a functional exploit on GitHub. Curl, Git, PHP, and dozens of appliances are under threat up to version 1.11.1 inclusive.
The U.S. federal agency set Sunday as the deadline for government entities to apply the CVE-2026-20230 patch, a server-side request forgery (SSRF) vulnerability in Cisco Unified Communications Manager that has already been exploited by attackers since the weekend of June 21 and 22.
CVE-2026-20230 in Cisco Unified Communications Manager and CVE-2026-12569 in PTC Windchill reach the federal deadline from CISA this Monday with confirmed active exploitation. The Cisco vulnerability opens a route to root; the Windchill vulnerability installs web shells on global industrial PLM platforms.
The U.S. agency added CVE-2026-12569 in Windchill (CVSS 10.0) and CVE-2026-20230 in Cisco UCM on June 25, both with webshells observed in production and a remediation deadline of July 16.