Aegiron, Author at - Page 10 of 86

CVE-2026-27022: LangGraph Redis Query Injection Flaw Exposes Cross-Tenant Data Through RediSearch Filter Manipulation

Vulnerabilities

AegironFebruary 23, 2026February 23, 20269 mins0

RediSearch Query Injection in LangGraph Redis Checkpoint Field Details CVE ID CVE-2026-27022 Component @langchain/langgraph-checkpoint-redis Vulnerability Type Query…

CVE-2026-2492: TensorFlow Plugin Loading Flaw Opens Door to Local Privilege Escalation

Vulnerabilities

AegironFebruary 23, 2026February 23, 202610 mins0

CVE-2026-2492 – TensorFlow Local Privilege Escalation via HDF5 Plugin Loading CVE ID: CVE-2026-2492Product: TensorFlowVulnerability Type: Local Privilege…

Critical RCE & Auth Bypass Flaws Discovered in GFI Archiver — Unpatched Systems at Immediate Risk of Remote Takeover

Vulnerabilities

AegironFebruary 23, 2026February 23, 20269 mins0

Product Overview Product: GFI ArchiverVendor: GFI SoftwareComponent(s) Affected: GFI Archiver is an enterprise email archiving solution typically…

CVE-2026-2635: Critical MLflow Default Credential Flaw Enables Instant Admin Takeover and Full System Compromise

Uncategorized

AegironFebruary 23, 2026February 23, 20269 mins0

MLflow – Default Credentials Leading to Administrative Takeover CVE ID: CVE-2026-2635Product: MLflowVulnerability Type: Use of Default Credentials…

CVE-2026-27203: Critical Env Injection Flaw in eBay MCP Server Opens Door to Remote Code Execution and Full Infrastructure Takeover

Vulnerabilities

AegironFebruary 23, 2026February 23, 202610 mins0

CVE-2026-27203 Product: eBay MCP ServerVulnerability Type: Environment Variable Injection (Env Injection)CVSS v3.1 Score: 9.1 (Critical)Severity: CriticalAttack Vector:…

Critical Alert: Authenticated RCE Flaws (CVE-2026-2042 & CVE-2026-2043) Put Nagios Servers at Risk of Full System Compromise

Vulnerabilities

AegironFebruary 23, 2026February 23, 20269 mins0

Authenticated Remote Code Execution in Nagios Product: Nagios (Nagios XI / Nagios Core-based web components)Vulnerability Type: Authenticated…

CVE-2026-27197: Critical Sentry SAML SSO Flaw Enables Silent Account Takeover Without Credentials

Vulnerabilities

AegironFebruary 23, 2026February 23, 202610 mins0

CVE-2026-27197 — Sentry SAML SSO Account Takeover CVE ID: CVE-2026-27197Product: Sentry (Self-Hosted)Affected Versions: >= 21.12.0 and <…

CVE-2026-27112: Critical Kargo Authorization Flaw Enables Privilege Escalation, Secret Theft, and Potential Remote Code Execution

Vulnerabilities

AegironFebruary 23, 2026February 23, 20269 mins0

Kargo – Privilege Escalation leading to RCE and Secret Exfiltration CVE ID: CVE-2026-27112Product: Kargo (Akuity)CVSS Score: 9.4…

CVE-2026-27194: Critical Remote Code Execution Flaw in D-Tale Exposes Servers to Full Takeover

Vulnerabilities

AegironFebruary 23, 2026February 23, 20269 mins0

D-Tale Remote Code Execution (RCE) CVE ID: CVE-2026-27194Product: D-Tale (Flask-based pandas DataFrame visualization tool)Vulnerability Type: Remote Code…

CVE-2026-27211: Critical Cloud Hypervisor Flaw Lets Guest VMs Steal Sensitive Host Files

Vulnerabilities

AegironFebruary 23, 2026February 23, 202611 mins0

Cloud Hypervisor – Host File Exfiltration from Guest VM via QCOW Backing File Abuse CVE ID: CVE-2026-27211Product:…