High-Risk Flaw Exposes Dell Unity Storage to Root-Level Command Execution — Immediate Patching Urged Vulnerabilities AegironJanuary 31, 2026January 31, 202610 mins0 Dell Unity / Dell UnityVSA — OS Command Injection Vulnerabilities Product overview The affected products are Dell…continue reading..
CVE-2026-25067: SmarterMail Flaw Lets Hackers Silently Force Server Authentication and Leak NTLM Credentials Vulnerabilities AegironJanuary 31, 2026January 31, 202610 mins0 Vulnerability Overview CVE ID: CVE-2026-25067Product: SmarterMail (Windows-based mail server)Vulnerability Type: Path Coercion leading to NTLM/SMB Authentication AbuseCVSS…continue reading..
CVE-2026-1498: Critical LDAP Injection Flaw Exposes WatchGuard Fireware Authentication Layer Vulnerabilities AegironJanuary 31, 2026January 31, 202611 mins0 CVE-2026-1498 — WatchGuard Fireware LDAP Injection CVE: CVE-2026-1498Name: WatchGuard Fireware LDAP InjectionCVSS v4.0 Score: 7.0 (High)Severity: HighExploitability:…continue reading..
CVE-2025-62514: Critical Parsec Crypto Flaw Allows Silent Man-in-the-Middle Attacks via Weak Curve25519 Key Exchange Vulnerabilities AegironJanuary 31, 2026January 31, 20268 mins0 CVE-2025-62514 Product: Parsec (Web Client / libparsec_crypto)Vulnerability Type: Cryptographic Weakness – Improper validation of Curve25519 public keysCVSS…continue reading..
CVE-2026-1699: Critical Eclipse Theia CI Pipeline Flaw Lets Hackers Hijack GitHub Actions and Steal Secrets via Malicious Pull Requests Vulnerabilities AegironJanuary 31, 2026January 31, 202611 mins0 Eclipse Theia – GitHub Actions CI Pipeline Remote Code Execution Vulnerability Overview High-Level Description A critical security…continue reading..
CVE-2025-69662: Critical GeoPandas SQL Injection Flaw Exposes PostGIS Databases to Silent Data Theft Vulnerabilities AegironJanuary 31, 2026January 31, 202610 mins0 CVE-2025-69662 Vulnerability Title: SQL Injection in GeoPandas to_postgis() FunctionCVE ID: CVE-2025-69662Affected Component: GeoPandas – to_postgis()Affected Versions: GeoPandas…continue reading..
CVE-2025-62348: Salt Automation at Risk — Unsafe YAML Parsing in Junos Module Opens Door to Code Execution Vulnerabilities AegironJanuary 31, 2026January 31, 202614 mins0 Summary What Is This Vulnerability? This vulnerability exists because the Salt automation framework’s junos execution module loads…continue reading..
CVE-2025-24293: Critical Rails Active Storage Image Flaw Opens Door to Silent Server Takeover Vulnerabilities AegironJanuary 31, 2026January 31, 202614 mins0 CVE-2025-24293 – Ruby on Rails Active Storage Unsafe Image Transformation Vulnerability CVE: CVE-2025-24293Description: Active Storage allowed transformation…continue reading..
iOS Banking Trojan Steals Faces: GoldPickaxe Uses Deepfake Videos to Bypass Mobile App Security Cyber Threat Intelligence AegironJanuary 31, 2026January 31, 202612 mins0 Incident Overview: GoldPickaxe iOS Malware Campaign What happened In late January, a new mobile malware campaign was…continue reading..
Fake KYC Alerts Turn Smartphones into Silent Spies, Government Warns Android Users Cyber Threat Intelligence AegironJanuary 31, 2026January 31, 202610 mins0 Incident Overview: “Twice is Wise” Cyber Awareness Campaign – Social Engineering RAT Malware via Fake KYC Updates…continue reading..
