ThreatVectr

Vulnerabilities — Page 31

Illustration: a sleek laptop keyboard with a shallow
Vulnerabilities

Google Patches 27 Chrome Flaws, Two Rated Critical

Chrome 150 arrives with fixes for a string of memory-related bugs, most of them found by Google's own engineers rather than outside researchers.

3 min read
Illustration: a modern laptop screen glowing blue in a dim office
Vulnerabilities

Microsoft patches 'RoguePlanet' Defender flaw after researcher publishes exploit in disclosure spat

The zero-day let attackers hand themselves the keys to a fully patched Windows machine. It was revealed by a researcher publicly feuding with Microsoft.

3 min read
Illustration: a black consumer Wi-Fi router sitting on a wooden desk in a dim home office
Vulnerabilities

A Secret Backdoor in Tenda Home Routers Lets Strangers Take Control, and There Is No Fix

A hidden login trick buried in Tenda networking gear gives anyone who knows the magic password full administrative control. The maker has not responded, and no patch exists.

3 min read
Illustration: a rack of white networking access points and small gateway boxes mounted on a modern office ceiling
Vulnerabilities

Ubiquiti Rushes Fixes for a 10-out-of-10 Flaw Across UniFi Gear

The networking vendor patched serious holes in UniFi Connect, Talk, Access, Protect and the underlying UniFi OS. One bug scores a perfect 10 on the severity scale.

3 min read
Illustration: a server room corridor
Vulnerabilities

U.S. Government Gives Agencies Two Weeks to Patch Four Actively Exploited Flaws

Critical security holes in Adobe ColdFusion, Langflow, and Joomla extensions are already being used by attackers. Federal agencies have until July 10 to fix them.

3 min read
Illustration: a darkened server rack in a data centre, blue and amber status lights glowing
Vulnerabilities

US cyber agency gives federal staff four days to patch Langflow AI tool being actively hacked

CISA added an authorisation bypass in the popular AI-agent builder Langflow to its must-patch list after Sysdig spotted attackers stealing cloud keys and hijacking servers.

4 min read
Illustration: a dimly lit server room with rows of dark rack-mounted servers
Vulnerabilities

CISA Flags Four Live-Exploited Bugs in Adobe, Joomla and Langflow

The US cyber agency gave federal agencies until early December to patch a critical Adobe ColdFusion flaw and three others already being abused in the wild.

3 min read
Illustration: a dark server room aisle, rows of black rack-mounted machines with faint green and amber status LEDs
Vulnerabilities

GhostLock: A 15-Year-Old Linux Bug Hands Any User Root Access

Researchers say CVE-2026-43499 has sat in the Linux kernel since 2011 and needs nothing more than a normal login to seize full control.

3 min read
Illustration: an open industrial control cabinet inside a substation
Vulnerabilities

Siemens tells industrial customers to patch RUGGEDCOM switches now, cites dozens of flaws in SINEC OS

The German engineering giant has shipped version 4.0 of its ruggedised network operating system to close more than two dozen bugs, including one rated 9.8 out of 10.

3 min read
Illustration: a small black consumer Wi-Fi router on a plain desk, indicator lights glowing amber, softly lit from one side
Vulnerabilities

Hidden Admin Backdoor Found in Tenda Router Firmware, CERT/CC Warns

CVE-2026-11405 lets an attacker skip the password check entirely and seize full administrative control of affected Tenda routers through the web interface.

3 min read
Illustration: a dimly lit server room with a single rack unit highlighted by a red status LED
Vulnerabilities

BeyondTrust Rushes Fixes for Two Critical Flaws That Let Attackers Walk Into Remote Support Tools

The company's Remote Support and Privileged Remote Access products carry pre-authentication bugs rated 9.2 on the severity scale, meaning attackers need no password to break in.

3 min read
Illustration: the blinking indicator lights on the front panel of a rack-mounted network appliance inside a dimly lit server
Vulnerabilities

A New Citrix NetScaler Flaw Is Already Being Exploited, And It Looks Familiar

A security hole in widely used Citrix network equipment is leaking corporate secrets from memory. Attackers moved within 24 hours of the patch dropping.

3 min read
Illustration: a dense server rack in a dim data centre, cool blue LEDs reflecting off polished floor tiles
Vulnerabilities

A 16-Year-Old Flaw in Linux's Virtual Machine Engine Lets Guests Break Into Their Host

Januscape (CVE-2026-53359) sits in shared code used on both Intel and AMD servers, and a public demo already crashes the host machine.

3 min read
Illustration: a dimly lit server rack in a corporate data centre
Vulnerabilities

Adobe ColdFusion flaw now under attack, Canada's cyber agency warns

A critical bug in Adobe's web platform is being exploited days after patches shipped. Roughly 800 servers sit exposed online.

3 min read
Illustration for the story: A Working Attack Script Is Now Public for the Linux 'Bad Epoll' Root Access Flaw
Vulnerabilities

A Working Attack Script Is Now Public for the Linux 'Bad Epoll' Root Access Flaw

A proof-of-concept, meaning a ready-made demonstration script that shows exactly how to exploit a flaw, has been released for a serious Linux vulnerability. Unpatched Linux servers are now a much easier target.

3 min read
© 2026 Threat Vectr