Vulnerability

364 Articles

CVE-2026-55200 — Critical libssh2 Flaw Enables Zero-Auth RCE

A critical security flaw in libssh2 — the SSH library silently embedded in curl, backup utilities, and IoT firmware worldwide — lets…

Security —— Jun 22, 2026 4 min read

Security researchers have uncovered a nearly three-decade-old vulnerability in Squid Proxy that lets anyone sharing the…

Internet —— Jun 3, 2026 3 min read

An AI model just found a decade-old attack that human security researchers somehow missed — and…

Security —— Jun 3, 2026 3 min read

A flaw that sat undetected in Redis for over two years — silently present in every…

Linux —— May 31, 2026 4 min read

A security researcher has disclosed a Linux local privilege escalation — dubbed CIFSwitch — that lets…

Security —— May 26, 2026 4 min read

That’s the blunt reality of BadHost, a newly disclosed authentication bypass vulnerability (CVE-2026-48710) in Starlette, the…

Security —— May 23, 2026 3 min read

A critical privilege escalation bug in LiteSpeed’s user-end cPanel plugin — now confirmed as actively exploited…

Security —— May 23, 2026 3 min read

F5 has rushed out a security advisory for a second critical heap overflow vulnerability in NGINX’s…

Security —— May 22, 2026 2 min read

The endpoint security software meant to protect enterprise networks from attackers has itself become a target.…

Security —— May 21, 2026 3 min read

A security researcher prepared a devastating Windows kernel exploit for Pwn2Own Berlin 2026 — then had…