CVE-2025-62878: Critical Kubernetes Storage Flaw Lets Attackers Break Out of Volume Paths and Reach Host Files Vulnerabilities AegironFebruary 6, 2026February 6, 20268 mins0 CVE-2025-62878 — Local Path Provisioner Path Traversal Description A path traversal vulnerability exists in the Local Path…continue reading..
Critical Alert: AutoGPT Flaw Allows Attackers to Access Internal Networks via SSRF Vulnerability Vulnerabilities AegironFebruary 6, 2026February 6, 20266 mins0 Product Overview Product Name: AutoGPTComponent Affected: RSSFeedBlock and SendDiscordFileBlockAffected Versions: All releases below v0.6.34Fixed Version: v0.6.34 AutoGPT…continue reading..
CVE-2026-25632: Critical EPyT-Flow Flaw Exposes Systems to Remote Code Execution via Unsafe Deserialization Vulnerabilities AegironFebruary 6, 2026February 6, 20267 mins0 Affected Product Product Name: EPyT-FlowComponent: EPyTAffected Versions: All versions prior to the fixed releaseDeployment Scope: All environments…continue reading..
CVE-2025-13375: Critical IBM CCA Flaw Exposes HSM Environments to Unauthenticated Remote Command Execution Vulnerabilities AegironFebruary 6, 2026February 6, 20268 mins0 CVE-2025-13375 CVE ID: CVE-2025-13375Product: IBM Common Cryptographic Architecture (CCA)Affected Versions: CVSS v3.1 Score: 9.8Severity: CriticalVulnerability Class: Remote…continue reading..
CVE-2026-24884: High-Severity npm compressing Flaw Allows Silent File Overwrite via Malicious Archives Vulnerabilities AegironFebruary 6, 2026February 6, 202610 mins0 CVE-2026-24884 CVE ID: CVE-2026-24884Affected Component: compressing npm package (tar extraction functionality)Affected Versions: Fixed Versions: CVSS v3.1 Score:…continue reading..
CVE-2026-25546: Critical Command Injection Flaw in Godot MCP Enables Remote Code Execution on Developer Systems Vulnerabilities AegironFebruary 6, 2026February 6, 20268 mins0 Vulnerability Overview CVE ID: CVE-2026-25546Affected Component: Godot MCP (Model Context Protocol server for Godot)Affected Versions: All versions…continue reading..
CVE-2025-69875: Quick Heal Antivirus Flaw Lets Local Users Jump Straight to SYSTEM Privileges Vulnerabilities AegironFebruary 5, 2026February 5, 20267 mins0 CVE-2025-69875 Product: Quick Heal Total SecurityAffected Version: 23.0.0Vulnerability Type: Local Privilege EscalationImpact: SYSTEM-level accessCVSS v3.1 Score: 7.8…continue reading..
CVE-2025-66374: CyberArk EPM Flaw Allows Local Users to Gain SYSTEM-Level Access Vulnerabilities AegironFebruary 5, 2026February 5, 20266 mins0 Product: CyberArk Endpoint Privilege ManagerAffected Version: ≤ 25.10.0Vulnerability Type: Local Privilege EscalationImpact: Administrative / SYSTEM-level accessCVSS v3.1…continue reading..
CVE-2025-36094: Authenticated Input Length Flaw in IBM Cloud Pak Automation Lets Users Disrupt Insights Services Vulnerabilities AegironFebruary 5, 2026February 5, 202610 mins0 CVE ID: CVE-2025-36094Vulnerability: Improper Input Length Validation in Business Automation InsightsProducts affected: IBM Cloud Pak for Business…continue reading..
Critical Chrome RCE Exposure: CVE-2026-1861 & CVE-2026-1862 Enable Remote Code Execution via Web Content Vulnerabilities AegironFebruary 5, 2026February 5, 20268 mins0 Product Overview Product: Google Chrome (Desktop)Vendor: GoogleAffected Versions: All versions earlier than 144.0.7559.132Platforms: Windows, macOS, LinuxAttack Vector:…continue reading..
