Vulnerabilities

Explore the Vulnerabilities category on our cybersecurity news blog for up-to-date coverage of critical software flaws and security gaps. From zero-day exploits to newly discovered bugs, we bring you expert insights on how these vulnerabilities impact businesses and individuals.

Learn about affected systems, potential risks, and mitigation strategies to safeguard your data and infrastructure. Stay informed with real-time updates, technical analyses, and actionable advice for addressing emerging threats.

Critical Next.js Vulnerabilities Enables Remote Code Execution Attacks

Two critical Next.js flaws allow unauthenticated remote code execution on Windows-hosted applications using the Image Optimization API to process AVIF…

2 days ago

Splunk Patches Critical MCP Server RCE and 16 Other Security Flaws Across AI Toolkit, Kafka Apps

Splunk has released security updates for 17 vulnerabilities affecting several apps and add-ons, including Splunk MCP Server, Splunk AI Toolkit,…

1 week ago

Claude AI Finds SAML Security Flaws That Can Let Attackers Take Over Accounts

Security researchers have used Anthropic’s Claude AI to uncover serious flaws in Security Assertion Markup Language (SAML) implementations that could…

1 week ago

BeyondTrust Windows EPM Vulnerabilities Allows Attackers to Escalate Privileges

BeyondTrust has disclosed two high-severity vulnerabilities in its Endpoint Privilege Management (EPM) product for Windows that could allow attackers with…

1 week ago

Apple Fixes 28 Security Vulnerabilities Across macOS, iOS, and iPadOS

Apple has released security updates for macOS, iOS, and iPadOS, addressing 28 vulnerabilities that could expose users to data leakage,…

1 week ago

Microsoft SCCM Vulnerability Chained to Execute Malicious Code Remotely

Security researchers have disclosed a serious attack chain affecting Microsoft System Center Configuration Manager, commonly known as SCCM or Configuration…

2 weeks ago

Roundcube 1.6.18 and 1.7.3 Released With Fix for RCE and SSRF Vulnerabilities

Roundcube has released versions 1.6.18 and 1.7.3 to address eleven security vulnerabilities affecting its webmail platform. The updates fix a…

2 weeks ago

Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges

TP-Link has disclosed multiple high-severity vulnerabilities affecting ISP-managed Aginet networking products, including mesh systems, routers, PON devices, and xDSL modems.…

2 weeks ago

Wireshark 4.6.8 Released With Patch for 28 Vulnerabilities That Lead to Crashes

The Wireshark Foundation has officially rolled out Wireshark 4.6.8, a security update that patches 28 distinct vulnerabilities capable of triggering…

2 weeks ago

Critical SAP Vulnerabilities Let Attackers Inject Malicious Code and Corrupt Memory

SAP's August 2026 Security Patch Day has delivered a substantial round of fixes, addressing 28 new security notes and one…

2 weeks ago