Multiple High and Critical Severity Flaws Discovered in NVIDIA Transformers4Rec and Nsight Tools Vulnerabilities AegironJanuary 21, 2026January 21, 202612 mins0 NVIDIA Product Vulnerabilities – Detailed Security Assessment (2025) Vendor: NVIDIAAffected Products: The following vulnerabilities impact NVIDIA developer…continue reading..
CVE-2025-55130 : Node.js Permission Model Sandbox Escape via Symbolic Link Resolution Vulnerabilities AegironJanuary 21, 2026January 21, 20269 mins0 CVE-2025-55130 — Node.js Permission Model Sandbox Escape Field Details CVE Identifier CVE-2025-55130 Product Node.js Vulnerability Type Permission…continue reading..
CVE-2026-21983: When a Local User Can Turn Oracle VM VirtualBox into a Hypervisor Takeover Gateway Vulnerabilities AegironJanuary 21, 2026January 21, 20268 mins0 Vulnerability Type: Privilege Escalation / Hypervisor TakeoverComponent Affected: VirtualBox CoreAttack Vector: LocalSeverity: HighCVSS v3.1 Base Score: 7.5…continue reading..
CVE-2026-21945: Silent Java SSRF That Can Freeze Your JVM and Take Services Offline Vulnerabilities AegironJanuary 21, 2026January 21, 202613 mins0 Affected Software: Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (many major supported…continue reading..
CVE-2026-0610 & CVE-2026-1007: Critical Access Control and Database Security Failures in Devolutions Server Vulnerabilities AegironJanuary 21, 2026January 21, 20269 mins0 Devolutions Server – Security Vulnerability Analysis Product: Devolutions ServerAffected Branch: 2025.3.xImpact Level: High to CriticalAttack Surface: Network-exposed…continue reading..
CVE-2025-65482 & CVE-2025-64087: From Malicious Documents to Full Server Takeover via XDocReport RCE Vulnerabilities AegironJanuary 21, 2026January 21, 20269 mins0 XDocReport – Product & Risk Overview XDocReport is a Java-based document generation library widely used to merge…continue reading..
CVE-2025-11043: Improper TLS Certificate Validation Exposes Industrial Automation Traffic to Interception Vulnerabilities AegironJanuary 21, 2026January 21, 202611 mins0 CVE-2025-11043 — B&R Automation / Automation Studio CVE: CVE-2025-11043Name: Improper TLS Certificate Validation in OPC-UA & ANSL…continue reading..
CVE-2026-22844: Critical Zoom Node MMR Command Injection Enables Remote Code Execution Vulnerabilities AegironJanuary 21, 2026January 21, 202612 mins0 CVE-2026-22844 — Zoom Node Multimedia Router (MMR) Type: Command Injection → Remote Code Execution (RCE)CVSS v3.1 Score:…continue reading..
CVE-2025-53912: Critical Arbitrary File Read Flaw Exposes MedDream PACS Systems Vulnerabilities AegironJanuary 21, 2026January 21, 20269 mins0 Vulnerability Overview CVE ID: CVE-2025-53912Affected Product: MedDream PACS PremiumAffected Version: 7.3.6.870Vulnerability Type: Arbitrary File ReadSeverity: CriticalCVSS v3.1…continue reading..
CVE-2026-1181: Critical Stored XSS Leading to Full Altium 365 Workspace Takeover Vulnerabilities AegironJanuary 21, 2026January 21, 20267 mins0 CVE Information CVE ID: CVE-2026-1181Vulnerability Type: Stored Cross-Site Scripting (XSS)Affected Product: Altium 365 – Forum ComponentSeverity: CriticalCVSS…continue reading..
