CVE-2025-67859 – Authentication Bypass in TLP (Linux Battery Utility) CyberSecurity News CyberDefenderJanuary 8, 2026January 8, 20263 mins0 Affected software: Vulnerability type: Severity: Aspect Details CVE ID CVE-2025-67859 Component TLP battery/power manager (Linux) Vulnerability Local…continue reading..
CVE-2025-14026 discovered Forcepoint’s Data Loss Prevention (DLP) client Threat Advisories CyberDefenderJanuary 7, 2026January 7, 20267 mins0 In the world of cybersecurity, sometimes the biggest risks aren’t from external attacks — they come from…continue reading..
Multiple RCE and Privilege-Escalation Vulnerabilities in Veeam Backup & Replication (January 2026) Threat Advisories CyberDefenderJanuary 7, 2026January 7, 202618 mins0 On 6–7 January 2026 Veeam published fixes for four vulnerabilities in Veeam Backup & Replication (13.x builds…continue reading..
CVE-2025-15385 Insufficient Verification of Data Authenticity in the TECNO Mobile Threat Advisories CyberDefenderJanuary 6, 2026January 6, 20262 mins0 Insufficient Verification of Data Authenticity in the TECNO Mobile com.Afmobi.Boomplayer app that can allow an authentication bypass.…continue reading..
CVE-2025-15029 — Centreon Infra Monitoring (Awie Export) || CVE-2025-15026 — Centreon Infra Monitoring (Awie Import) Threat Advisories CyberDefenderJanuary 6, 2026January 6, 20264 mins0 CVE-2025-15029 — Centreon Infra Monitoring (Awie Export) Severity: CriticalVulnerability Type: Unauthenticated SQL Injection (CWE-89)Impact: Database compromise (data…continue reading..
CVE-2025-55204 – One-Click Remote Code Execution in Muffon Threat Advisories CyberDefenderJanuary 6, 2026January 6, 20263 mins0 Severity: Critical / High (CVSS 3.1 8.8)Product: muffon — a cross-platform desktop music streaming client Affected Versions:…continue reading..
CVE-2026-21440: Arbitrary File Write via Multipart Path Traversal in adonisjs/bodyparser CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20263 mins0 Field Details CVE ID CVE-2026-21440 Vulnerability Type Path Traversal (CWE-22) Affected Component @adonisjs/bodyparser Attack Vector Remote (via…continue reading..
CVE-2025-68668 n8n CVSS 9.9 Flaw Enables Authenticated Remote Command Execution CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20266 mins0 CVE-2025-68668, a critical security vulnerability has been disclosed in n8n, a popular open-source workflow automation platform. The…continue reading..
Unpatched FortiWeb WAFs Abused as Persistent Sliver C2 Infrastructure CyberSecurity News CyberDefenderJanuary 6, 2026January 6, 20265 mins0 A newly uncovered cybersecurity campaign has revealed a sophisticated threat actor exploiting outdated Fortinet FortiWeb web application…continue reading..
CVE-2025-64125: Network Boundary Bridging Vulnerability in nCloud VPN Service Threat Advisories AegironJanuary 4, 2026January 4, 20269 mins0 Vendor: Nuvation EnergyProduct: nCloud VPN ServiceCVE ID: CVE-2025-64125 Vulnerability Snapshot (At a Glance) Attribute Details CVSS v3.1…continue reading..
