CVE-2026-26220: Critical LightLLM Flaw Enables Unauthenticated Remote Code Execution via Unsafe Pickle Deserialization Vulnerabilities AegironFebruary 18, 2026February 18, 202610 mins0 LightLLM — Unauthenticated Remote Code Execution via pickle.loads() CVE ID: CVE-2026-26220Product: LightLLMAffected Component: PD (Prefill-Decode) Disaggregation Mode…continue reading..
CVE-2026-22208: Critical OpenS100 Lua Flaw Enables Remote Code Execution Through Malicious Chart Files Vulnerabilities AegironFebruary 18, 2026February 18, 20268 mins0 OpenS100 – Unrestricted Lua Execution Leading to Remote Code Execution CVE ID: CVE-2026-22208Product: OpenS100 (S-100 Portrayal Engine)Vulnerability…continue reading..
CVE-2025-66614: Apache Tomcat mTLS Bypass Lets Attackers Slip Past Client Certificate Authentication via SNI Mismatch Vulnerabilities AegironFebruary 18, 2026February 18, 202611 mins0 Apache Tomcat — SNI-Based Client Certificate Authentication Bypass CVE ID: CVE-2025-66614Vendor: ApacheProduct: Apache TomcatVulnerability Type: Authentication BypassCWE:…continue reading..
CVE-2026-22769: Critical Hardcoded Credential in Dell RecoverPoint Enables Remote Root Takeover Vulnerabilities AegironFebruary 18, 2026February 18, 202610 mins0 Dell RecoverPoint for Virtual Machines – Hardcoded Credential Leading to Remote Root Access CVE ID: CVE-2026-22769Affected Product:…continue reading..
Critical VS Code Flaw (CVE-2025-65717) Exposes Millions of Developers to Remote File Theft via Live Server Extension CyberSecurity News CyberDefenderFebruary 18, 2026February 18, 20267 mins0 On 16 February 2026, a critical vulnerability identified as CVE-2025-65717 was published in the Common Vulnerabilities and…continue reading..
CVE-2026-25108: Critical FileZen Command Injection Flaw Actively Exploited, Immediate Patch Urged Vulnerabilities AegironFebruary 16, 2026February 16, 20269 mins0 CVE-2026-25108 – FileZen OS Command Injection CVE ID: CVE-2026-25108Product: FileZen (Soliton Systems)Vulnerability Type: OS Command Injection (CWE-78)CVSS…continue reading..
CVE-2026-23152: Linux Kernel Wi-Fi Parsing Flaw Allows Wireless Attackers to Trigger Memory Corruption via mac80211 TTLM Bug Vulnerabilities AegironFebruary 16, 2026February 16, 20269 mins0 Vulnerability Overview CVE ID: CVE-2026-23152Component: Linux Kernel – mac80211 (IEEE 802.11 wireless stack)Vulnerability Type: Out-of-Bounds Read /…continue reading..
CVE-2026-2033: Critical MLflow Tracking Server Flaw Enables Directory Traversal and Potential Remote Code Execution Vulnerabilities AegironFebruary 16, 2026February 16, 202610 mins0 CVE-2026-2033 – MLflow Tracking Server Directory Traversal to Remote Code Execution CVE ID: CVE-2026-2033Product: MLflow Tracking ServerVulnerability…continue reading..
Passwork 7.4 Rolls Out Major Security Lockdown, Tightens Control Over Password Sharing to Reduce Enterprise Breach Risk Vulnerabilities AegironFebruary 16, 2026February 16, 20267 mins0 Product: PassworkVersion: 7.4Release Type: Security EnhancementCVE: Not applicableCVSS Score: Not applicableSeverity: Not a vulnerability (Preventive Security Hardening)Exploitability:…continue reading..
Critical Patch Bypass Exposes n8n Users to Remote Code Execution Again — Emergency Updates Released Vulnerabilities AegironFebruary 16, 2026February 16, 20266 mins0 Overview n8n, the widely used open-source workflow automation platform, released emergency security updates today after researchers uncovered…continue reading..
