CVE-2026-0622: Full Authentication Bypass in Open5GS WebUI via Hard-Coded JWT Secret Vulnerabilities AegironJanuary 21, 2026January 21, 202610 mins0 CVE-2026-0622 — Open5GS WebUI Hard-coded JWT Signing Key What the Vulnerability Is Open5GS is an open-source 5G…continue reading..
High-Severity Chrome Flaw CVE-2026-1220 Exposes Users to Remote Browser Exploitation Risk CyberSecurity News CyberDefenderJanuary 21, 2026January 21, 20267 mins0 CVE-2026-1220 is a high-severity race condition vulnerability in the V8 JavaScript engine used by Google Chrome.The flaw…continue reading..
Critical CVE-2026-21962 Enables Remote Compromise of Oracle HTTP and WebLogic Proxy Threat Advisories CyberDefenderJanuary 21, 2026January 21, 20266 mins0 CVE-2026-21962 is a critical, remotely exploitable vulnerability affecting Oracle HTTP Server (OHS) and the Oracle WebLogic Server…continue reading..
Critical WordPress Plugin Flaw Allows Hackers to Create Admin Accounts Without Login (CVE-2025-14533) CyberSecurity News CyberDefenderJanuary 21, 2026January 21, 20268 mins0 CVE-2025-14533 is a critical unauthenticated privilege-escalation vulnerability affecting the Advanced Custom Fields: Extended (ACF Extended) WordPress plugin.…continue reading..
CVE-2026-23844: Unauthorized Account Balance Manipulation via IDOR in Whisper Money Vulnerabilities AegironJanuary 20, 2026January 20, 20269 mins0 CVE-2026-23844 — Whisper Money Vulnerability Type: Insecure Direct Object Reference (IDOR)Affected Product: Whisper MoneyAffected Component: Account balance…continue reading..
CVE-2026-22797: Critical OpenStack keystonemiddleware Flaw Enables Identity Spoofing & Full Admin Privilege Escalation Vulnerabilities AegironJanuary 20, 2026January 20, 20269 mins0 CVE-2026-22797 – OpenStack keystonemiddleware Vulnerability type: Privilege Escalation / Identity SpoofingComponent: keystonemiddleware (external_oauth2_token filter)Severity: CriticalCVSS v3.1 score:…continue reading..
CVE-2026-23723: Authenticated SQL Injection in WeGIA Leading to Full Database Compromise Vulnerabilities AegironJanuary 20, 2026January 20, 20269 mins0 CVE-2026-23723 Product: WeGIAVulnerability Type: SQL Injection (Authenticated)Impact: Full database exfiltrationCVSS v3.1 Score: 7.2Severity: HighAttack Vector: NetworkPrivileges Required:…continue reading..
CVE-2026-23875: Unauthorized Users Can Poison CrawlChat’s Knowledge Base via Authorization Bypass Vulnerabilities AegironJanuary 20, 2026January 20, 20268 mins0 Vulnerability Overview CVE: CVE-2026-23875Name: CrawlChat Authorization Bypass / Knowledge-Base PoisoningSeverity: MediumCVSS Score: ~5.7 (Moderate risk level)Exploitability: No…continue reading..
CVE-2026-23880: One Stored XSS Away from Full Admin Takeover in OnboardLite Vulnerabilities AegironJanuary 20, 2026January 20, 202610 mins0 Key Facts (At a Glance) What This Vulnerability Is This vulnerability exists in the way OnboardLite displays…continue reading..
CVE-2026-1193: Silent Admin Access Flaw Exposes MineAdmin to Remote Unauthorized Control Vulnerabilities AegironJanuary 20, 2026January 20, 202611 mins0 CVE: CVE-2026-1193Affected software: MineAdmin versions 1.x and 2.xType of issue: Improper authorization / authorization bypass at the…continue reading..
