Collaborate Disseminate
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
The post Ivanti EPM Update Patches Remotely Exploitable Flaws appeared first on SecurityWeek.
Continue reading Ivanti EPM Update Patches Remotely Exploitable Flaws
The security defects could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data.
The post SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform appeared first on SecurityWeek.
Continue reading SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.
The post August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day appeared first on SecurityWeek.
Continue reading August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
The security defects could be exploited for arbitrary code execution and denial-of-service.
The post Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws appeared first on SecurityWeek.
Continue reading Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws
Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine.
The post Zoom Patches Zero-Click Code Execution Vulnerability appeared first on SecurityWeek.
Continue reading Zoom Patches Zero-Click Code Execution Vulnerability
SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs.
The post SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities appeared first on SecurityWeek.
Continue reading SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities
Remote, unauthenticated attackers could exploit the bugs to cause a denial-of-service (DoS) condition.
The post Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC appeared first on SecurityWeek.
Continue reading Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC
An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request word for word.
The post ‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad appeared first on SecurityWeek.
Continue reading ‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad
The security defect allows unauthenticated, remote attackers to gain administrative access to Metabase instances.
The post Metabase Patches Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.
Continue reading Metabase Patches Vulnerability Exploited as Zero-Day
The critical-severity flaw allows unauthenticated, remote attackers to execute arbitrary commands.
The post CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability appeared first on SecurityWeek.
Continue reading CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability