Oracle VirtualBox, Oracle Agile PLM, and Oracle Java SE (2026) Executive Summary Three high-impact vulnerabilities were identified…

Azure Front Door – Privilege Escalation via Control-Plane Abuse CVE ID: CVE-2026-24306Affected Service: Azure Front DoorVulnerability Type:…

CVE-2025-54816 — Missing Authentication on WebSocket Endpoint CVE ID: CVE-2025-54816Vulnerability Name: WebSocket Endpoint Missing AuthenticationCategory: Authentication Bypass…

CVE-2026-21264 — Microsoft Account XSS / Spoofing Vulnerability CVE Identifier: CVE-2026-21264CVSS v3.1 Score: 9.3 (Critical)Affected Component: Microsoft…

CVE-2026-24304 – Azure Resource Manager Privilege Escalation CVE ID: CVE-2026-24304Component: Azure Resource Manager (ARM)Vulnerability Type: Improper Access…

CVE-2026-0775 — npm CLI Local Privilege Escalation CVE ID: CVE-2026-0775Affected component: npm CLIVulnerability class: Local Privilege Escalation…

Product Overview Product: GiteaCategory: Self-hosted Git repository management platformTypical Users: Enterprises, DevOps teams, open-source maintainersCore Risk Area:…

Vulnerability Overview Executive Summary A high-severity command injection vulnerability exists in the Framelink Figma MCP Server. Due…

Vulnerability Summary CVE ID: CVE-2026-0756Component: github-kanban-mcp-server (@sunwood-ai-labs/github-kanban-mcp-server)Vulnerability Type: OS Command InjectionAttack Class: Unauthenticated Remote Code ExecutionSeverity: CriticalCVSS…