CVE-2026-22781: Critical TinyWeb CGI Command Injection Enables Remote OS Takeover Vulnerabilities AegironJanuary 13, 2026January 13, 202613 mins0 CVE: CVE-2026-22781Name: TinyWeb CGI OS Command InjectionSeverity: CriticalCVSS Score: 10.0 (highest possible critical severity)Exploitability: Remote, unauthenticated —…continue reading..
CVE-2026-22799: Critical Arbitrary File Upload in Emlog Enables Full Remote Code Execution Vulnerabilities AegironJanuary 13, 2026January 13, 20269 mins0 CVE ID: CVE-2026-22799Affected Product: Emlog (self-hosted blogging / CMS platform)Affected Versions: All versions up to and including…continue reading..
CVE-2026-22252: One Login, One API Call, Full Root Shell – Critical LibreChat Command Execution Flaw Vulnerabilities AegironJanuary 13, 2026January 13, 20269 mins0 CVE ID: CVE-2026-22252Product: LibreChatAffected Component: MCP (Model Context Protocol) – stdio transportSeverity: CriticalCVSS v3.1 Score: 9.1 (Critical)Attack…continue reading..
Hackers Hijacked Apex Legends Game to Control the Inputs of Another Player Remotely CyberSecurity News CyberDefenderJanuary 13, 2026January 13, 20263 mins0 Players of Apex Legends were left stunned after a new hacking incident allowed attackers to remotely take…continue reading..
SAP Security Patch Day January 2026 – Patch for Critical Injection and RCE Vulnerabilities CyberSecurity News CyberDefenderJanuary 13, 2026January 13, 20266 mins0 January 13, 2026 marked SAP’s first Security Patch Day of the year — a scheduled monthly release…continue reading..
CVE-2026-22610: Angular SVG Script Attribute Sanitization Bypass Leading to XSS CyberSecurity News CyberDefenderJanuary 13, 2026January 13, 202612 mins0 CVE-2026-22610 is a high-severity Cross-Site Scripting (XSS) vulnerability in Angular’s template compiler that allows an attacker to…continue reading..
Endesa Confirms Cybersecurity Breach Exposing Customer Data CyberSecurity News CyberDefenderJanuary 13, 2026January 13, 20263 mins0 A major cyberattack on Endesa’s commercial platform has exposed sensitive customer data, including identity and banking details,…continue reading..
University of Hawaiʻi Cancer Center Suffers Ransomware Attack Exposing Research Data CyberSecurity News CyberDefenderJanuary 13, 2026January 13, 20263 mins0 What Was Compromised Delay in Disclosure Notification & Response University’s Actions Post-Attack Context & Impactcontinue reading..
Facebook Login Thieves Turn to “Browser-in-Browser” Phishing Trick CyberSecurity News CyberDefenderJanuary 13, 2026January 13, 20263 mins0 Attackers are increasingly abusing a technique called Browser-in-the-Browser (BitB) to steal Facebook login credentials from unsuspecting users.…continue reading..
Seven-Year Prison Term for Hacker Who Breached Rotterdam and Antwerp Port Systems CyberSecurity News CyberDefenderJanuary 13, 2026January 13, 20263 mins0 How the Breach Worked Link to Drug Trafficking Legal Background Broader Implicationscontinue reading..
