CVE-2026-24810: Critical RethinkDB JSON Parsing Flaw Opens Door to Unauthenticated Remote Code Execution Vulnerabilities AegironJanuary 31, 2026January 31, 20268 mins0 CVE-2026-24810 Product: RethinkDBAffected versions: ≤ 2.4.4Vulnerability type: Buffer Overflow (JSON parsing)Impact: Remote Code Execution (RCE)Severity: CriticalCVSS score:…continue reading..
High-Risk Flaws Discovered in AnythingLLM: Remote Code Execution and API Key Exposure Leave Systems Fully Exposed Vulnerabilities AegironJanuary 31, 2026January 31, 202610 mins0 Product Details Product: AnythingLLMProduct Category: Self-hosted AI / LLM orchestration platformDeployment Models: On-premise, containerized, cloud-hostedAffected Versions: All…continue reading..
CVE-2026-24479: Critical Zip-Slip Flaw in HUSTOJ Enables Remote Code Execution via Malicious ZIP Uploads Vulnerabilities AegironJanuary 31, 2026January 31, 202612 mins0 CVE-2026-24479 What the vulnerability is This vulnerability exists because the software accepts a ZIP file from a…continue reading..
Critical Suricata Vulnerabilities Expose IDS Engines to Remote Crashes and Memory Exhaustion Attacks Vulnerabilities AegironJanuary 31, 2026January 31, 202612 mins0 Product Details (At a Glance) CVE Summary Table CVE ID CVSS Score Severity Vulnerability Type Exploitability Exploit…continue reading..
CVE-2025-68670: Critical xrdp Flaw Allows Pre-Auth Remote Code Execution on Linux Systems Vulnerabilities AegironJanuary 31, 2026January 31, 202611 mins0 CVE-2025-68670 — xrdp Stack Buffer Overflow → Remote Code Execution CVE ID: CVE-2025-68670Severity: CriticalCVSS v3.1 (Base Score):…continue reading..
CVE-2025-21589: Critical Juniper Session Smart Flaw Enables Unauthenticated Full Admin Takeover Vulnerabilities AegironJanuary 31, 2026January 31, 20268 mins0 CVE-2025-21589 Product: Juniper Session Smart Router (SSR) / Session Smart Conductor / WAN Assurance Managed RouterVulnerability Type:…continue reading..
CVE-2026-1470: Critical n8n Flaw Allows Workflow Expressions to Trigger Full System Takeover Vulnerabilities AegironJanuary 31, 2026January 31, 20269 mins0 CVE-2026-1470 High-Level Risk Statement A critical weakness exists in the way n8n evaluates user-defined expressions inside workflows.…continue reading..
CVE-2026-24779: High-Risk SSRF Flaw in vLLM Lets Attackers Slip Past Host Restrictions Using Crafted URLs Vulnerabilities AegironJanuary 31, 2026January 31, 20269 mins0 CVE-2026-24779 — vLLM SSRF via Host Restriction Bypass CVE: CVE-2026-24779Product: vLLMAffected Versions: vLLM versions prior to 0.14.1Vulnerability…continue reading..
CVE-2026-24770: Critical RAGFlow MinerU Zip Slip Flaw Enables Remote Code Execution via Malicious ZIP Uploads Vulnerabilities AegironJanuary 31, 2026January 31, 202611 mins0 CVE-2026-24770 CVE ID: CVE-2026-24770Product: RAGFlow – MinerU ingestion componentAffected Versions: All versions ≤ 0.23.1Vulnerability Type: Zip Slip…continue reading..
CVE-2026-24765: Silent PHPUnit Test Runs Can Turn CI Pipelines into a Code-Execution Trap Vulnerabilities AegironJanuary 31, 2026January 31, 20269 mins0 CVE-2026-24765 – Unsafe Deserialization Leading to Code Execution in PHPUnit CVE ID: CVE-2026-24765Component: PHPUnit – PHPT Code…continue reading..
