ThreatVectr

Vulnerabilities — Page 6

Illustration: a dark server room rack with a single glowing amber ethernet port emitting soft light
Vulnerabilities

One HTTP Request Turns Bifrost AI Gateway Into a Shell

A default-off auth setting in the popular open-source AI gateway lets anyone who can reach it run programs as the server user. The fix ships in 2.1.0.

4 min read
Illustration: a dimly lit enterprise server rack with a single network orchestrator appliance glowing amber
Vulnerabilities

Arista Says a VeloCloud Orchestrator Bug Is Already Being Exploited

A remote attacker with no login can reach privileged functions on the server that runs an entire SD-WAN network. On-prem customers using certificate authentication need to act now.

3 min read
Illustration: an Arm-based server motherboard under cool blue rack
Vulnerabilities

Arm64 KVM flaw lets a guest VM reach into the host's memory

CVE-2026-89775 is a critical Linux kernel bug in the Arm64 virtualization path. A researcher says a guest can read and write host memory when nested virtualization is on.

3 min read
Illustration: a dimly lit server room with rows of dark network racks and cool blue status lights
Vulnerabilities

Microsoft Called This SharePoint Bug a Spoofing Issue. It Runs Code.

A vulnerability first rated medium turned out to let logged-in users execute code on the server. The researcher who found it just published the details.

3 min read
Illustration: a rack-mounted network switch in a dim server room, front panel activity LEDs glowing amber and green
Vulnerabilities

CISA gives federal agencies three days to patch a Zyxel switch bug already being used in attacks

CVE-2026-7273 lets anyone on the local network hijack GS1900 switches with a single crafted web request. Federal deadline: 24 September 2026.

3 min read
Illustration: a dimly lit corporate server room, rows of dark rack-mounted network firewall appliances with glowing amber
Vulnerabilities

Check Point patches critical login flaw that hands attackers root on firewall management servers

CVE-2026-91843 is the third critical bug in a fortnight for Check Point, and two earlier authentication bypasses are already being exploited in the wild.

4 min read
Illustration: a dimly lit server rack in a modern data center, blue and amber indicator lights reflecting on glass panels
Vulnerabilities

Attackers Are Breaking Into Orkes Conductor Servers Through a Critical Pre-Login Flaw

Fortinet says opportunistic scanning has begun against Orkes Conductor installations vulnerable to CVE-2026-58138, a pre-authentication remote code execution bug patched in version 3.30.2.

3 min read
Illustration: a dimly lit server rack in a data centre, blue and amber status LEDs reflecting off polished floor tiles
Vulnerabilities

CISA tells federal agencies: patch three Linux kernel bugs within days, attackers already using them

Three Linux kernel flaws are being exploited in the wild. Federal agencies have until 21 September to patch, and the most serious carries a 9.8 severity score.

4 min read
Illustration: a modern automotive factory floor at low light
Vulnerabilities

A flaw in Mitsubishi factory networks lets attackers scramble the machines

CVE-2026-13584 hits more than 80 Mitsubishi Electric products that speak CC-Link IE TSN, the protocol wiring modern factory floors together.

3 min read
Illustration: a dimly lit server rack in a data centre, one 1U server pulled halfway out on its rails
Vulnerabilities

A Critical Flaw in Unbound Lets Attackers Hijack DNS Servers

A heap overflow in the DNSSEC validator of NLnet Labs' Unbound resolver, tracked as CVE-2026-81642, opens the door to remote code execution. Version 1.26.1 fixes it.

3 min read
Illustration: A vast server room shot from floor level
Vulnerabilities

Three High-Severity BIND Flaws Let Attackers Crash the Internet's Phone Book

ISC patched 14 vulnerabilities in BIND 9 on 16 September 2026, including three remotely exploitable bugs that can knock DNS resolvers offline with a single crafted packet.

3 min read
Illustration: a cluttered desk with an open laptop showing a generic dark website admin dashboard, a coffee cup
Vulnerabilities

WordPress 7.1.1 Fixes a Flaw That Could Install a Theme on an Admin's Click

The maintenance release patches 11 security bugs, including a Click2Shell chain that abuses a logged-in administrator's browser session.

3 min read
A smartphone screen showing an incoming call notification on the lock screen, with a subtle unauthorized account access indicator appearing simultaneously in th
Vulnerabilities

WeChat Flaw Allows Account Takeover Through Incoming Calls

Calif researchers built a worm that hijacks WeChat accounts via an incoming call. The target's phone doesn't need to be touched.

2 min read
A network monitoring dashboard displaying thousands of exposed business servers connected to the internet, with critical alerts flowing across multiple screens
Vulnerabilities

SAP patches critical 'OVERPASS' flaw that hands attackers full control of business servers

A buffer overflow in the SAP Kernel, plus a second critical bug in NetWeaver Message Server, could let unauthenticated attackers run commands on more than 10,000 exposed systems.

4 min read
A computer monitor showing cryptocurrency transaction logs with timestamps, displaying a massive outflow followed by partial return flows in different colored d
Vulnerabilities

Liquid Network Attacker Sends Back Most of the Stolen Bitcoin, Keeps $47M

A bug in the Elements software behind Bitcoin's Liquid sidechain let someone drain nearly 4,000 bitcoin. Most of it came back the next day. Roughly 598 bitcoin, worth about $47 million, has not.

3 min read
© 2026 Threat Vectr