Aegiron, Author at - Page 16 of 86

CVE-2026-25108: Critical FileZen Command Injection Flaw Actively Exploited, Immediate Patch Urged

Vulnerabilities

AegironFebruary 16, 2026February 16, 20269 mins0

CVE-2026-25108 – FileZen OS Command Injection CVE ID: CVE-2026-25108Product: FileZen (Soliton Systems)Vulnerability Type: OS Command Injection (CWE-78)CVSS…

CVE-2026-23152: Linux Kernel Wi-Fi Parsing Flaw Allows Wireless Attackers to Trigger Memory Corruption via mac80211 TTLM Bug

Vulnerabilities

AegironFebruary 16, 2026February 16, 20269 mins0

Vulnerability Overview CVE ID: CVE-2026-23152Component: Linux Kernel – mac80211 (IEEE 802.11 wireless stack)Vulnerability Type: Out-of-Bounds Read /…

CVE-2026-2033: Critical MLflow Tracking Server Flaw Enables Directory Traversal and Potential Remote Code Execution

Vulnerabilities

AegironFebruary 16, 2026February 16, 202610 mins0

CVE-2026-2033 – MLflow Tracking Server Directory Traversal to Remote Code Execution CVE ID: CVE-2026-2033Product: MLflow Tracking ServerVulnerability…

Passwork 7.4 Rolls Out Major Security Lockdown, Tightens Control Over Password Sharing to Reduce Enterprise Breach Risk

Vulnerabilities

AegironFebruary 16, 2026February 16, 20267 mins0

Product: PassworkVersion: 7.4Release Type: Security EnhancementCVE: Not applicableCVSS Score: Not applicableSeverity: Not a vulnerability (Preventive Security Hardening)Exploitability:…

Critical Patch Bypass Exposes n8n Users to Remote Code Execution Again — Emergency Updates Released

Vulnerabilities

AegironFebruary 16, 2026February 16, 20266 mins0

Overview n8n, the widely used open-source workflow automation platform, released emergency security updates today after researchers uncovered…

CVE-2026-2531: Critical Unauthenticated SSRF in MindsDB Exposes Internal Networks and Cloud Credentials to Remote Attackers

Vulnerabilities

AegironFebruary 16, 2026February 16, 20268 mins0

CVE-2026-2531 – MindsDB Server-Side Request Forgery (SSRF) CVE ID: CVE-2026-2531Product: MindsDBVulnerability Type: Server-Side Request Forgery (SSRF)CVSS v3.1…

CVE-2026-22153: Critical FortiOS LDAP Authentication Bypass Lets Attackers Access VPNs Without Credentials

Vulnerabilities

AegironFebruary 16, 2026February 16, 20269 mins0

CVE-2026-22153 – FortiOS & FortiSandbox LDAP Authentication Bypass CVE ID: CVE-2026-22153Products Affected: FortiOS, FortiProxy (LDAP/FSSO deployments), FortiSandbox…

Critical Linux Kernel Flaws Discovered: Multiple Memory Corruption and Privilege Escalation Vulnerabilities Expose Systems to Crashes and Potential Takeover

Vulnerabilities

AegironFebruary 16, 2026February 16, 20269 mins0

Dozens of newly identified CVEs impact core Linux subsystems — from networking and storage to Wi-Fi and…

UNC1069 Unmasked: Deepfake Zoom Calls, Fake Audio Fixes, and Seven Malware Strains Fuel Sophisticated North Korea–Linked Crypto Heist Campaign

Vulnerabilities

AegironFebruary 15, 2026February 15, 202610 mins0

North Korea-Linked Actor Using Fake Zoom Calls to Deploy Multi-Stage Malware Executive Summary A financially motivated threat…

Silent Foothold: Hackers Plant Dormant “Sleeper” Web Shells on Ivanti EPMM Servers, Raising Fears of Ransomware Access Sales

CyberSecurity News

AegironFebruary 15, 2026February 15, 202611 mins0

Executive Summary Security researchers uncovered a stealthy post-exploitation technique affecting Ivanti Endpoint Manager Mobile (EPMM) servers. Instead…