CVE-2026-2033: Critical Unauthenticated RCE Discovered in MLflow Tracking Server — Remote Attackers Can Execute Code Over the Network Vulnerabilities AegironFebruary 23, 2026February 23, 202610 mins0 MLflow Tracking Server – Unauthenticated Remote Code Execution CVE ID: CVE-2026-2033Affected Product: MLflow Tracking ServerVulnerability Type: Path…continue reading..
CISA Flags Actively Exploited Roundcube Webmail Flaws, Adds Critical RCE and XSS Bugs to KEV Catalog CyberSecurity News CyberDefenderFebruary 21, 2026February 21, 20267 mins0 Recently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities (KEV) Catalog with…continue reading..
CVE-2026-26324: OpenClaw SSRF Bypass Lets Attackers Sneak Into Internal Networks Using IPv6 Trickery Vulnerabilities AegironFebruary 20, 2026February 20, 20268 mins0 OpenClaw – SSRF Protection Bypass via IPv4-Mapped IPv6 Overview CVE-2026-26324 is a high-severity Server-Side Request Forgery (SSRF)…continue reading..
CVE-2026-26200: Critical Heap Overflow in HDF5 Library Exposes Systems to Crash and Potential Code Execution Vulnerabilities AegironFebruary 20, 2026February 20, 202612 mins0 CVE-2026-26200 — HDF5 Heap Buffer Overflow Vulnerability CVE: CVE-2026-26200Short Name: HDF5 H5T__conv_struct_opt Heap OverflowSeverity: HighCVSS v3.1 Score:…continue reading..
CVE-2026-26960: Critical Hardlink Escape Flaw in Node-Tar Enables Arbitrary File Write Outside Extraction Directory Vulnerabilities AegironFebruary 20, 2026February 20, 202610 mins0 node-tar – Arbitrary File Write / Read via Hardlink Escape Field Value CVE ID CVE-2026-26960 Affected Component…continue reading..
CVE-2026-27475: Critical SPIP Deserialization Flaw Exposes Websites to Remote Code Execution Vulnerabilities AegironFebruary 20, 2026February 20, 20269 mins0 SPIP – Insecure Deserialization Leading to Remote Code Execution Field Value CVE ID CVE-2026-27475 Affected Product SPIP…continue reading..
CVE-2026-27194: Critical RCE Flaw in D-Tale Exposes Servers to Remote Code Execution via Malicious Filter Payloads Vulnerabilities AegironFebruary 20, 2026February 20, 20269 mins0 D-Tale – Remote Code Execution (RCE) Field Value CVE ID CVE-2026-27194 Affected Product D-Tale (Python package: dtale)…continue reading..
CVE-2026-26980: Critical SQL Injection in Ghost CMS Exposes Databases to Unauthenticated Remote Attackers Vulnerabilities AegironFebruary 20, 2026February 20, 202611 mins0 Ghost CMS – Unauthenticated Database Arbitrary Read (SQL Injection) Vulnerability Overview CVE ID: CVE-2026-26980Product: Ghost CMSVulnerability Type:…continue reading..
CVE-2026-26064 / CVE-2026-26065: calibre Path Traversal Flaw Enables Arbitrary File Write and Windows RCE via Startup Folder Abuse Vulnerabilities AegironFebruary 20, 2026February 20, 20269 mins0 Product Overview — calibre Product Name: calibreVendor: Kovid GoyalPlatform: Windows, macOS, LinuxPrimary Function: e-Book management, conversion, editing,…continue reading..
CVE-2026-2409: Critical SQL Injection Flaw Discovered in Delinea Cloud Suite — Privileged Access Data at Risk Vulnerabilities AegironFebruary 20, 2026February 20, 202611 mins0 CVE-2026-2409 CVE ID: CVE-2026-2409Product: Delinea Cloud Suite (on-premises)Vulnerability Type: SQL Injection (Argument Injection)CVSS Score: 9.3 (Critical)Severity: CRITICALExploitability:…continue reading..
