CVE-2026-2531: Critical Unauthenticated SSRF in MindsDB Exposes Internal Networks and Cloud Credentials to Remote Attackers Vulnerabilities AegironFebruary 16, 2026February 16, 20268 mins0 CVE-2026-2531 – MindsDB Server-Side Request Forgery (SSRF) CVE ID: CVE-2026-2531Product: MindsDBVulnerability Type: Server-Side Request Forgery (SSRF)CVSS v3.1…continue reading..
CVE-2026-22153: Critical FortiOS LDAP Authentication Bypass Lets Attackers Access VPNs Without Credentials Vulnerabilities AegironFebruary 16, 2026February 16, 20269 mins0 CVE-2026-22153 – FortiOS & FortiSandbox LDAP Authentication Bypass CVE ID: CVE-2026-22153Products Affected: FortiOS, FortiProxy (LDAP/FSSO deployments), FortiSandbox…continue reading..
Critical Linux Kernel Flaws Discovered: Multiple Memory Corruption and Privilege Escalation Vulnerabilities Expose Systems to Crashes and Potential Takeover Vulnerabilities AegironFebruary 16, 2026February 16, 20269 mins0 Dozens of newly identified CVEs impact core Linux subsystems — from networking and storage to Wi-Fi and…continue reading..
Google Patches First Chrome Zero-Day of 2026 as Actively Exploited CSS Vulnerability Hits Desktop Users CyberSecurity News CyberDefenderFebruary 16, 2026February 16, 20266 mins0 In mid-February 2026, Google rolled out an important Stable Channel update for its Chrome browser across desktop…continue reading..
UNC1069 Unmasked: Deepfake Zoom Calls, Fake Audio Fixes, and Seven Malware Strains Fuel Sophisticated North Korea–Linked Crypto Heist Campaign Vulnerabilities AegironFebruary 15, 2026February 15, 202610 mins0 North Korea-Linked Actor Using Fake Zoom Calls to Deploy Multi-Stage Malware Executive Summary A financially motivated threat…continue reading..
CVE-2026-1729: Critical Authentication Bypass in AdForest WordPress Theme Enables Full Admin Takeover Without Login Vulnerabilities AegironFebruary 15, 2026February 15, 20269 mins0 CVE-2026-1729 – AdForest WordPress Theme Authentication Bypass CVE ID: CVE-2026-1729Affected Product: AdForest WordPress ThemeAffected Versions: Up to…continue reading..
CVE-2025-67433: Critical Heap Overflow in Open TFTP Server Exposes Systems to Remote Crash and Potential Code Execution Vulnerabilities AegironFebruary 15, 2026February 15, 20269 mins0 Open TFTP Server MultiThreaded – Heap Buffer Overflow CVE ID: CVE-2025-67433Affected Product: Open TFTP Server MultiThreadedAffected Version:…continue reading..
CVE-2026-26021: Critical set-in npm Flaw Enables Prototype Pollution, Puts Node.js Applications at Risk of Full Compromise Vulnerabilities AegironFebruary 15, 2026February 15, 202610 mins0 CVE-2026-26021 – set-in (npm) – Prototype Pollution CVE ID: CVE-2026-26021Package: set-in (npm)Vulnerability Type: Prototype PollutionAffected Versions: >=…continue reading..
CVE-2026-25994: Critical PJSIP Buffer Overflow Opens Door to Remote Code Execution in VoIP Systems Vulnerabilities AegironFebruary 15, 2026February 15, 202610 mins0 CVE-2026-25994 – PJSIP PJNATH ICE Session Buffer Overflow CVE ID: CVE-2026-25994Severity: HighCVSS Score: 8.1Impact: Remote Code Execution…continue reading..
CVE-2026-26268: Critical Sandbox Escape in Cursor Editor Enables Git Hook–Based Remote Code Execution Vulnerabilities AegironFebruary 15, 2026February 15, 202610 mins0 CVE ID: CVE-2026-26268Vulnerability Title: Sandbox Escape via Git Hooks in Cursor EditorCVSS v3.1 Score: 8.0 (High)Severity: HighExploitability:…continue reading..
