CVE-2023-54339: Critical Unauthenticated Remote Command Execution in Webgrind 1.1 Vulnerabilities AegironJanuary 14, 2026January 14, 202614 mins0 Unauthenticated Remote Command Execution (RCE)** At a Glance Executive Summary Webgrind 1.1 has a serious flaw in…continue reading..
CVE-2025-63314: Static Password Reset Token Enables Full Account Takeover in Acora CMS Vulnerabilities AegironJanuary 14, 2026January 14, 20268 mins0 Vulnerability Type: Authentication / Password Reset Logic FlawImpact: Full Account TakeoverSeverity: CriticalCVSS v3.1 Score: 10.0 (Critical)Attack Vector:…continue reading..
CVE-2025-46070 & CVE-2025-46066: Critical Automai Vulnerabilities Enable Remote Code Execution and Full Administrative Compromise Vulnerabilities AegironJanuary 14, 2026January 14, 20268 mins0 Vendor: AutomaiAffected Products: Automai BotManager, Automai DirectorAffected Version: 25.2.0Risk Level: CriticalAttack Surface: Network / Application / Privilege…continue reading..
CVE-2026-23478: Critical Authentication Bypass Allowing Full Account Takeover in Cal.com Vulnerabilities AegironJanuary 14, 2026January 14, 20268 mins0 Vulnerability Overview CVE ID: CVE-2026-23478Product: Cal.comVulnerability Type: Authentication Bypass / Authorization Logic FlawAffected Component: Custom NextAuth JWT…continue reading..
High-Risk Kibana Vulnerabilities Patched by Elastic, Impacting File Access, Email, and Fleet Services CyberSecurity News CyberDefenderJanuary 14, 2026January 14, 20265 mins0 Elastic has released critical security updates to address four notable vulnerabilities across its platform, including one high-severity…continue reading..
CVE-2025-64155: Critical Unauthenticated Remote Code Execution in Fortinet FortiSIEM CyberSecurity News CyberDefenderJanuary 14, 2026January 14, 20263 mins0 CVE-2025-64155 is a critical remote code execution (RCE) vulnerability affecting Fortinet’s FortiSIEM security information and event management…continue reading..
Critical Node.js Flaw Could Crash Servers and Trigger Denial-of-Service Attacks CyberSecurity News CyberDefenderJanuary 14, 2026January 14, 20266 mins0 Developers and site operators worldwide are being urged to update Node.js immediately after a critical vulnerability was…continue reading..
CVE-2026-20805 — Desktop Window Manager information-disclosure CyberSecurity News CyberDefenderJanuary 14, 2026January 14, 202612 mins0 CVE-2026-20805 is an information-disclosure vulnerability in Microsoft’s Desktop Window Manager (DWM) that can allow a locally authenticated,…continue reading..
CVE-2025-14631: Single Wireless Frame Can Instantly Knock TP-Link and ASUS Routers Offline Vulnerabilities AegironJanuary 13, 2026January 13, 20269 mins0 Executive Summary (At a Glance) What This Vulnerability Is CVE-2025-14631 is a flaw in how certain Wi-Fi…continue reading..
From Search Box to Admin Control: High-Severity GestSup Vulnerabilities Expose Full System Access Vulnerabilities AegironJanuary 13, 2026January 13, 20269 mins0 GestSup – Product & Vulnerability Overview Product: GestSupCategory: Web-based IT service management (tickets, assets, users)Affected scope: Self-hosted…continue reading..
