Aegiron, Author at - Page 14 of 86

CVE-2025-1272: Fedora Kernel Lockdown Silently Disabled — Local Privilege Escalation Risk Exposed

Vulnerabilities

AegironFebruary 19, 2026February 19, 202610 mins0

CVE-2025-1272 CVE ID: CVE-2025-1272Affected Component: Fedora Linux KernelIssue: Kernel Lockdown Mode Disabled by Default (Regression)CVSS v3.1 Base…

CVE-2026-1999: Critical Authorization Bypass in GitHub Enterprise Server Allows Unauthorized Auto-Merges

Vulnerabilities

AegironFebruary 19, 2026February 19, 202610 mins0

GitHub Enterprise Server – Authorization Bypass via Auto-Merge CVE ID: CVE-2026-1999Product: GitHub Enterprise Server (GHES)Vulnerability Type: Authorization…

OpenClaw Critical Vulnerabilities: CVE-2026-27002, CVE-2026-27001 & CVE-2026-25474 — Container Escape, Prompt Injection & Webhook Authentication Bypass

Vulnerabilities

AegironFebruary 19, 2026February 19, 202614 mins0

OpenClaw — Product Overview OpenClaw is a locally hosted, tool-enabled AI assistant that can interact with the…

CVE-2026-27013: Critical Stored XSS Flaw in Fabric.js SVG Export Exposes Applications to Remote Script Injection

Vulnerabilities

AegironFebruary 19, 2026February 19, 202611 mins0

Vulnerability Summary Field Value CVE ID CVE-2026-27013 Affected Product Fabric.js (npm package: fabric) Affected Versions All versions…

CVE-2026-25926: Notepad++ Unsafe Search Path Flaw Enables Silent Code Execution via Explorer Hijack

Vulnerabilities

AegironFebruary 19, 2026February 19, 20269 mins0

Notepad++ – Unsafe Search Path Leading to Arbitrary Code Execution CVE ID: CVE-2026-25926Affected Product: Notepad++ (Windows)Vulnerability Type:…

CVE-2026-1435: Critical Session Fixation Flaw in Graylog Web Interface Enables Silent Account Takeover

Vulnerabilities

AegironFebruary 19, 2026February 19, 20269 mins0

CVE-2026-1435 — Graylog Web Interface Field Value CVE ID CVE-2026-1435 Affected Product Graylog Web Interface (confirmed in…

CVE-2026-26988 & CVE-2026-26990: Critical SQL Injection Flaws Rock LibreNMS — Public PoC Raises Urgent Upgrade Warning

Vulnerabilities

AegironFebruary 19, 2026February 19, 20269 mins0

LibreNMS — Product Overview Product: LibreNMSType: Open-source network monitoring systemTechnology Stack: PHP application with MySQL/MariaDB backendAffected Area:…

CVE-2026-23595: Critical Authentication Bypass Lets Attackers Create Admin Accounts in HPE Aruba Private 5G Core

Vulnerabilities

AegironFebruary 18, 202610 mins0

Unauthenticated API flaw exposes core network control — full administrative takeover possible from adjacent network access Authentication…

CVE-2026-2439: Critical Session ID Flaw in Concierge::Sessions Opens Door to Remote Account Takeover

Vulnerabilities

AegironFebruary 18, 2026February 18, 20269 mins0

Concierge::Sessions (Perl) — Predictable Session IDs CVE ID: CVE-2026-2439Affected Component: Concierge::Sessions (Concierge::Sessions::Base)Affected Versions: 0.8.1 through 0.8.4Fixed Version:…

CVE-2026-25903: Apache NiFi Authorization Bypass Lets Low-Privilege Users Modify Restricted Dataflows

Vulnerabilities

AegironFebruary 18, 2026February 18, 20269 mins0

Apache NiFi – Missing Authorization on Restricted Component Updates CVE ID: CVE-2026-25903Product: Apache NiFiAffected Versions: 1.1.0 through…