CVE-2026-23960: Stored XSS in Argo Workflows Enables Browser-Based Privilege Abuse Vulnerabilities AegironJanuary 22, 2026January 22, 20269 mins0 Vulnerability Overview CVE ID: CVE-2026-23960Product: Argo WorkflowsVulnerability Type: Stored Cross-Site Scripting (Stored XSS)Impact Category: Privilege Abuse /…continue reading..
Critical CVAT Vulnerabilities Enable Full Admin Takeover and Silent Session Hijacking Vulnerabilities AegironJanuary 22, 2026January 22, 20269 mins0 Product overview Product: CVAT (Computer Vision Annotation Tool)Category: Web-based data annotation platform for images and videosTypical usage:…continue reading..
CVE-2026-22822: Critical External Secrets Operator Flaw Enabling Cross-Namespace Secret Theft Vulnerabilities AegironJanuary 22, 2026January 22, 20269 mins0 CVE-2026-22822 — External Secrets Operator Cross-Namespace Secret Disclosure CVE: CVE-2026-22822Affected Product: External Secrets Operator (ESO)Severity: CriticalCVSS Score:…continue reading..
CVE-2025-56005: Critical Remote Code Execution via Unsafe Pickle Deserialization in PLY Vulnerabilities AegironJanuary 22, 2026January 22, 202611 mins0 CVE: CVE-2025-56005Name: Unsafe picklefile deserialization in PLY yacc()CVSS Score: 9.8 (Critical)Severity: CriticalExploitability: Remote code execution via untrusted…continue reading..
CRYPTOGRAPHIC TRUST FAILURE: Critical SM2 Vulnerabilities Enable Key Theft, Signature Forgery, and Authentication Bypass Vulnerabilities AegironJanuary 22, 2026January 22, 20268 mins0 sm-crypto – SM2 Cryptographic Implementation Failures Product & Component Details (At a Glance) Field Value Product sm-crypto…continue reading..
CVE-2026-23518: Critical JWT Authentication Bypass Enables Rogue Windows Device Enrollment in Fleet Vulnerabilities AegironJanuary 22, 2026January 22, 202613 mins0 CVE-2026-23518 Overview CVE Identifier: CVE-2026-23518Severity: CriticalCVSS v4 Base Score: 9.3 – very high severityPrimary Affected Component: Fleet…continue reading..
CVE-2026-24002: Malicious Spreadsheet Breaks Grist Sandbox, Enabling Full Server Takeover Vulnerabilities AegironJanuary 22, 2026January 22, 202610 mins0 CVE ID: CVE-2026-24002Severity: CriticalCVSS v3.1 Score: 9.0Attack Vector: NetworkPrivileges Required: NoneUser Interaction: Indirect (opening or processing a…continue reading..
Critical Remote Code Execution Flaws Expose Tenda Wi-Fi 6 Routers to Full Network Takeover Vulnerabilities AegironJanuary 22, 2026January 22, 20269 mins0 Product & Vulnerability Overview The following vulnerabilities affect consumer-grade Wi-Fi 6 routers manufactured by Tenda. These devices…continue reading..
CVE-2026-22793: One Click to Compromise — Critical Renderer RCE in 5ire AI Assistant Leading to Full Host Takeover Vulnerabilities AegironJanuary 22, 2026January 22, 20268 mins0 CVE ID: CVE-2026-22793Product: 5ire AI Assistant (Desktop Client)Component: Markdown Renderer – ECharts PluginVulnerability Type: Renderer-based Remote Code…continue reading..
Critical Telnet Flaw in GNU Inetutils Allows Remote Root Access Without Authentication CyberSecurity News CyberDefenderJanuary 22, 2026January 22, 20266 mins0 CVE-2026-24061 is a critical authentication bypass vulnerability affecting the telnetd service shipped with GNU Inetutils. The issue…continue reading..
