Technology ❯ Software Development

Security Flaws

Remote Code Execution Input Validation Exploit Techniques Server-Side Request Forgery Zero-Day Vulnerabilities Privilege Escalation CVE Identifiers Implementation Issues Patching Deterministic Nonce

Forescout Finds 15 ZTP Flaws in TP‑Link Omada That Can Be Chained to Take Over Networks

These zero‑touch provisioning weaknesses let attackers intercept credentials and seize controller access, posing ongoing operational risk.

OpenAI Fixes AgentForger Flaw That Could Forge Invisible AI Insiders

Unpatched Flaws Let Other Extensions Trigger Claude for Chrome to Read Gmail and Docs

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

Google Releases June Android Patches Fixing Actively Exploited Zero‑Day

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

GrafanaGhost Vulnerability Lets AI Features Leak Data From Grafana

Fortinet FortiClient EMS CVE-2026-21643 Now Under Active Exploitation

Salesforce Alerts Customers to Experience Cloud Scans After ShinyHunters Claims Data Thefts

Google Rushes Patch for Chrome Zero‑Day Exploited in the Wild

n8n Issues Fixes After JFrog Uncovers Sandbox Escapes Allowing Authenticated RCE

EU-Backed GCVE Launches as Decentralized Alternative to CVE

Active Attacks Target Adobe Commerce With 'SessionReaper' Exploit

Active Exploits Target Gladinet CentreStack and TrioFox Zero-Day That Can Lead to RCE

Google Patches 'Gemini Trifecta' Flaws Enabling Indirect Prompt Injection

SolarWinds Ships Third Hotfix for Critical Web Help Desk RCE Bypass

CISA Adds Actively Exploited DELMIA Apriso Flaw to KEV With Oct. 2 Fix Deadline

Commvault Patches Four Flaws That Enable Pre‑Auth RCE Chains in On‑Prem Backup Suite

Trend Micro Releases Mitigation Tool for Critical Apex One Zero-Days

Google Deploys Protections for Gmail AI Summaries to Thwart Phishing Exploit