January 2026 - Page 49 of 75 -

VoidLink: The Silent Cloud Intruder Built to Live Inside Containers

Cyber Threat Intelligence

AegironJanuary 13, 2026January 13, 202617 mins0

Overview VoidLink is a newly uncovered Linux-based malware framework designed specifically for modern cloud environments, particularly systems…

SHADOW#REACTOR: How Trusted Windows Tools Were Turned into a Stealthy Remcos RAT Infection Chain

Cyber Threat Intelligence

AegironJanuary 13, 2026January 13, 202610 mins0

Multi-Stage Living-off-the-Land Malware Delivery Using VBS, PowerShell, MSBuild, and Remcos RAT Executive Overview SHADOW#REACTOR is a stealth-focused…

CVE-2025-14631: Single Wireless Frame Can Instantly Knock TP-Link and ASUS Routers Offline

Vulnerabilities

AegironJanuary 13, 2026January 13, 20269 mins0

Executive Summary (At a Glance) What This Vulnerability Is CVE-2025-14631 is a flaw in how certain Wi-Fi…

From Search Box to Admin Control: High-Severity GestSup Vulnerabilities Expose Full System Access

Vulnerabilities

AegironJanuary 13, 2026January 13, 20269 mins0

GestSup – Product & Vulnerability Overview Product: GestSupCategory: Web-based IT service management (tickets, assets, users)Affected scope: Self-hosted…

CVE-2026-22776: Remote Decompression Bomb Vulnerability in cpp-httplib Enables High-Impact Denial of Service

Vulnerabilities

AegironJanuary 13, 2026January 13, 202610 mins0

CVE: CVE-2026-22776Product: cpp-httplib (a popular single-header C++ library for building HTTP/HTTPS clients and servers)Severity: HighCVSS (v4.0): ~8.7…

CVE-2025-66802: Critical Remote Code Execution via Image Upload in Covid-19 Contact Tracing System

Vulnerabilities

AegironJanuary 13, 2026January 13, 202610 mins0

Vulnerability Summary CVE ID: CVE-2025-66802Severity: CriticalCVSS v3.1 Score: 9.8Attack Vector: NetworkPrivileges Required: NoneUser Interaction: NoneExploit Availability: Publicly…

CVE-2026-22771: Silent Credential Leakage in Envoy Gateway Leading to Cluster Compromise

Vulnerabilities

AegironJanuary 13, 2026January 13, 20267 mins0

CVE ID: CVE-2026-22771Affected Component: Envoy GatewaySeverity: HighCVSS Score: 8.8Impact Type: Credential Disclosure → Privilege Escalation → Cluster…

CVE-2025-29329: Critical Sagemcom F@st IPP Buffer Overflow Enables Unauthenticated Remote Code Execution

Vulnerabilities

AegironJanuary 13, 2026January 13, 20268 mins0

Vulnerability Overview CVE ID: CVE-2025-29329Severity: CriticalImpact: Remote Code Execution (RCE)Attack Vector: NetworkAuthentication Required: NoneUser Interaction: NoneExploitability: High…

CVE-2026-22785: Critical Code Injection in orval OpenAPI Generation Enables Remote Code Execution

Vulnerabilities

AegironJanuary 13, 2026January 13, 202611 mins0

CVE: CVE-2026-22785Severity: CriticalCVSS v4.0 Score: 9.3 — Remote, unauthenticated, high impact on code generation workflowsExploitability: High potential…

CVE-2026-22794: One-Click Account Takeover via Poisoned Password Reset Links

Vulnerabilities

AegironJanuary 13, 2026January 13, 202614 mins0

CVE: CVE-2026-22794Severity: CriticalCVSS v3.1: 9.6 (High Impact, Easy to Exploit)Exploitability: High — can be done without authentication;…