CVE-2026-23896: Immich API Keys Could Quietly Promote Themselves to Full Admin Access
CVE-2026-23896 – Immich API Privilege Escalation CVE ID: CVE-2026-23896Product: ImmichVulnerability Type: API Authorization Bypass / Privilege EscalationCVSS…
continue reading..
CVE-2026-24054: Malformed Container Image Can Corrupt Host Filesystem in Kata Containers, Triggering Node-Level Outage
CVE-2026-24054 — Kata Containers Host Filesystem Corruption via Block Device Hotplug CVE: CVE-2026-24054Severity: HighCVSS v3.1 Base Score:…
continue reading..
CVE-2026-24897: Critical Erugo File Upload Flaw Allows Full Server Takeover
Erugo – Arbitrary File Upload Leading to Remote Code Execution Vulnerability Overview CVE ID: CVE-2026-24897Product: Erugo (self-hosted…
continue reading..
Critical Vulnerability at Moltbook AI Leaks Emails, Tokens, and API Secrets
A critical security vulnerability was discovered in Moltbook, a recently launched social networking platform exclusively for artificial…
continue reading..
CVE-2026-24888: Maker.js Prototype Pollution Flaw Exposes Developer Toolchains to Silent Logic Manipulation
CVE-2026-24888 — Maker.js Prototype Pollution Vulnerability Vulnerability Overview CVE ID: CVE-2026-24888Affected Component: Maker.jsAffected Function: makerjs.extendObjectVulnerability Class: Prototype…
continue reading..
CVE-2026-24889: Silent Arithmetic Overflow in soroban-sdk Puts Smart Contract Integrity at Risk
CVE-2026-24889 — soroban-sdk Arithmetic Overflow / Range Handling Bug CVE: CVE-2026-24889Product: rs-soroban-sdk (Rust SDK for Soroban smart…
continue reading..
Critical OneFlow Flaws Expose AI Workloads to Easy Denial-of-Service Attacks
Product Details OneFlow is an open-source deep learning framework used for building, training, and serving AI/ML models…
continue reading..
CVE-2026-25130: Critical CAI Argument Injection Bug Opens Door to Remote Code Execution — Patch Urgently Required
CVE-2026-25130 — Argument Injection Leading to Remote Code Execution Vulnerability Summary Official Patch / Upgrade The vulnerability…
continue reading..
CVE-2026-24780: AutoGPT Platform Flaw Allows Authenticated Users to Execute Arbitrary Code
CVE-2026-24780 – AutoGPT Platform Vulnerability Overview CVE ID: CVE-2026-24780Affected Product: AutoGPT PlatformVulnerability Type: Remote Code Execution (RCE)Severity:…
continue reading..
