CVE-2026-24747: “Trusted” PyTorch Model Files Can Trigger Memory Corruption and Lead to Remote Code Execution Vulnerabilities AegironJanuary 31, 2026January 31, 202613 mins0 CVE-2026-24747 – PyTorch Memory Corruption via Pickle Leading to Potential RCE CVE ID: CVE-2026-24747Severity: HighCVSS v3.1 Score:…continue reading..
CVE-2026-24741: High-Severity ConvertX Flaw Lets Attackers Delete Arbitrary Server Files via Simple Path Traversal Vulnerabilities AegironJanuary 31, 2026January 31, 20268 mins0 Vulnerability Overview CVE ID: CVE-2026-24741Product: ConvertXAffected Versions: All versions prior to 0.17.0Fixed Version: 0.17.0 and laterSeverity: HighCVSS…continue reading..
CVE-2026-24740: Breaking Dozzle Flaw Allows Low-Privilege Users to Bypass Container Isolation and Spawn Unauthorized Root Shells Vulnerabilities AegironJanuary 31, 2026January 31, 20269 mins0 Vulnerability Overview CVE ID: CVE-2026-24740Affected Product: Dozzle (Container Log Viewer with Shell/Exec capability)Affected Versions: All versions below…continue reading..
Critical Flaws Expose SolarWinds Web Help Desk to Silent Takeover and Full System Compromise Vulnerabilities AegironJanuary 31, 2026January 31, 20267 mins0 SolarWinds Web Help Desk Product: SolarWinds Web Help DeskApplication Stack: Java (JVM), Embedded Web Server, Backend APIsTrust…continue reading..
Grafana Hit by High-Risk Vulnerabilities Enabling Privilege Escalation and Service Disruption Vulnerabilities AegironJanuary 31, 2026January 31, 20269 mins0 Product Overview Grafana is a widely used open-source observability and visualization platform. It enables organizations to build…continue reading..
New Critical SmarterMail Vulnerability Allows Attackers to Take Over Mail Servers Without Authentication CyberSecurity News CyberDefenderJanuary 30, 2026January 30, 20267 mins0 CVE-2026-24423 is a critical unauthenticated remote code execution (RCE) vulnerability in SmarterTools SmarterMail.The flaw exists in an…continue reading..
CISA Flags Two Actively Exploited Ivanti EPMM Zero-Day Vulnerabilities CyberSecurity News CyberDefenderJanuary 30, 2026January 30, 20264 mins0 Ivanti has disclosed two critical security flaws — CVE-2026-1281 and CVE-2026-1340 — affecting Ivanti Endpoint Manager Mobile…continue reading..
Critical Flaws in SolarWinds Web Help Desk Allow Unauthenticated Attackers to Bypass Security and Execute Code CyberSecurity News CyberDefenderJanuary 29, 2026January 29, 202621 mins0 Product: SolarWinds Web Help Desk (WHD) Affected versions: versions prior to 2026.1 (WHD installations not upgraded to…continue reading..
Weaponized EncystPHP Web Shell Exploits FreePBX Flaw to Seize Full Control of VoIP Systems CyberSecurity News CyberDefenderJanuary 28, 2026January 28, 20268 mins0 FortiGuard Labs has identified and analyzed a sophisticated PHP web shell campaign that targets FreePBX systems. The…continue reading..
SolarWinds Warns of Critical Web Help Desk Vulnerabilities Exposing Systems to Takeover CyberSecurity News CyberDefenderJanuary 28, 2026January 28, 20264 mins0 SolarWinds has rolled out security updates to fix several serious flaws in its Web Help Desk (WHD)…continue reading..
