Topic
Latest Security Alert coverage — 16 articles.
CVE-2026-72898 is an unauthenticated SQL injection in Metabase, scored CVSS 10.0 and already in CISA KEV. One request to /api/session/reset_password gives an attacker admin access and the credentials for every connected database. If you run Metabase, patch today.
CVE-2026-14669 is a CVSS 8.8 HIGH heap buffer overflow in PostgreSQL's to_char function that can run arbitrary code as the database OS user, patched August 13, 2026. Two questions decide your workload: is Postgres in your stack, and is your version older than 18.5 / 17.11 / 16.15 / 15.19 / 14.24?
A 9.1 critical authentication bypass in PAN-OS GlobalProtect, actively exploited and now in CISA KEV. But it only bites under a specific config. The two questions that decide your workload: is the product in your stack, and does your config meet the exposure conditions?
Active exploitation of an unauthenticated root RCE in PAN-OS firewalls. No patch until May 13. The one question your team needs to answer in the next two hours: is the User-ID Authentication Portal exposed to the internet?
732-byte exploit. First-try root on every modern Linux distribution. Page-cache-only corruption that on-disk integrity tools miss. Crosses container boundaries. Surfaced by an AI-assisted audit in roughly an hour.
A 27-character omission gave any network-adjacent attacker full control over 2,689+ publicly exposed nginx servers. The real story: every other app bolting MCP onto existing auth stacks.
CVE-2026-32201 allows unauthenticated spoofing on SharePoint Server. CISA added it to KEV immediately. Third SharePoint zero-day in under a year — ToolShell echoes loom large.
Two CVSS 9.8 vulnerabilities hit Cisco management infrastructure. IMC auth bypass lets attackers take over any admin account. SSM On-Prem gives unauthenticated root access. Neither requires credentials.
A critical SQL injection in FortiClient EMS 7.4.4 allows unauthenticated attackers to dump admin credentials, endpoint data, and certificates with a single HTTP request. Active exploitation confirmed.
Google just released an urgent Chrome update patching eight high-severity vulnerabilities — all capable of enabling remote code execution, targeting GPU, audio, fonts, and federated auth components.
Between March 12-19, 2026, OpenClaw had 9 high-severity CVEs published — more than one critical flaw per day. This isn't a bad week. It's a systemic security architecture failure.
A high-severity vulnerability (CVSS 7.8) in Ubuntu Desktop 24.04+ allows any unprivileged local user to gain full root access. The exploit abuses a timing gap between snap-confine and systemd-tmpfiles — no memory corruption, no kernel exploit, just patience.
Google API keys deployed years ago for Maps and Firebase now silently authenticate to Gemini endpoints. Over 2,800 live keys were found exposed on the public internet — belonging to financial institutions, security companies, and Google itself.
A high-severity use-after-free vulnerability in Google Chrome's CSS engine (CVE-2026-2441) is being actively exploited. All Chromium-based browsers are affected — including headless deployments used in CI/CD pipelines and PDF generation services.
A denial-of-service vulnerability in PAN-OS Advanced DNS Security (CVE-2026-0229) allows unauthenticated attackers to force firewalls into repeated reboot cycles, potentially pushing them into maintenance mode. Upgrade affected PAN-OS versions immediately.
A critical authentication bypass in FortiCloud SSO (CVE-2026-24858, CVSS 9.4) is being actively exploited. Attackers with any FortiCloud account can potentially access devices belonging to other organizations. Patch immediately and audit your admin accounts.