Aegiron, Author at - Page 15 of 86

CVE-2026-22860: Rack Directory Traversal Flaw Exposes Sensitive Files via Root Prefix Bypass

Vulnerabilities

AegironFebruary 18, 2026February 18, 20269 mins0

Rack Rack::Directory – Directory Traversal (Root Prefix Bypass) CVE ID: CVE-2026-22860Component: Rack (Rack::Directory)Vulnerability Type: Directory Traversal /…

CVE-2025-36247: Critical XXE Flaw in IBM Db2 Exposes Databases to Data Theft and Remote Exploitation

Vulnerabilities

AegironFebruary 18, 2026February 18, 202610 mins0

IBM Db2 – CVE-2025-36247 XML External Entity (XXE) Vulnerability CVE ID: CVE-2025-36247Product: IBM Db2Vulnerability Type: XML External…

CVE-2026-24733: Apache Tomcat HTTP/0.9 Flaw Enables Security Constraint Bypass via Crafted HEAD Requests

Vulnerabilities

AegironFebruary 18, 2026February 18, 20269 mins0

Apache Tomcat – HTTP/0.9 Security Constraint Bypass CVE ID: CVE-2026-24733Product: Apache TomcatVulnerability Type: Security Constraint Bypass /…

CVE-2026-2630: Critical Command Injection Flaw in Tenable Security Center Allows Authenticated Remote Code Execution

Vulnerabilities

AegironFebruary 18, 2026February 18, 20269 mins0

CVE-2026-2630 Product: Tenable Security CenterVulnerability Type: OS Command Injection (CWE-78)CVSS v3.1: 8.8 (High)Vector: AV:N / AC:L /…

CVE-2026-26119: Critical Privilege Escalation Flaw in Windows Admin Center Exposes Enterprise Management Gateways to Full System Takeover

Vulnerabilities

AegironFebruary 18, 2026February 18, 20269 mins0

Windows Admin Center – Privilege Escalation Vulnerability CVE ID: CVE-2026-26119Product: Microsoft Windows Admin Center (WAC)Vulnerability Type: Improper…

CVE-2025-65753: Critical TLS Flaw in Guardian Gryphon Router Enables Remote Root Command Execution Without Authentication

Vulnerabilities

AegironFebruary 18, 2026February 18, 20269 mins0

Guardian Gryphon – TLS Certificate Handling → Root Command Execution CVE ID: CVE-2025-65753Affected Product: Gryphon Guardian router…

CVE-2026-26220: Critical LightLLM Flaw Enables Unauthenticated Remote Code Execution via Unsafe Pickle Deserialization

Vulnerabilities

AegironFebruary 18, 2026February 18, 202610 mins0

LightLLM — Unauthenticated Remote Code Execution via pickle.loads() CVE ID: CVE-2026-26220Product: LightLLMAffected Component: PD (Prefill-Decode) Disaggregation Mode…

CVE-2026-22208: Critical OpenS100 Lua Flaw Enables Remote Code Execution Through Malicious Chart Files

Vulnerabilities

AegironFebruary 18, 2026February 18, 20268 mins0

OpenS100 – Unrestricted Lua Execution Leading to Remote Code Execution CVE ID: CVE-2026-22208Product: OpenS100 (S-100 Portrayal Engine)Vulnerability…

CVE-2025-66614: Apache Tomcat mTLS Bypass Lets Attackers Slip Past Client Certificate Authentication via SNI Mismatch

Vulnerabilities

AegironFebruary 18, 2026February 18, 202611 mins0

Apache Tomcat — SNI-Based Client Certificate Authentication Bypass CVE ID: CVE-2025-66614Vendor: ApacheProduct: Apache TomcatVulnerability Type: Authentication BypassCWE:…

CVE-2026-22769: Critical Hardcoded Credential in Dell RecoverPoint Enables Remote Root Takeover

Vulnerabilities

AegironFebruary 18, 2026February 18, 202610 mins0

Dell RecoverPoint for Virtual Machines – Hardcoded Credential Leading to Remote Root Access CVE ID: CVE-2026-22769Affected Product:…