CISA Flags Active Exploitation: Critical Gogs Path Traversal (CVE-2025-8110) Added to KEV CyberSecurity News AegironJanuary 13, 2026January 13, 202610 mins0 Product: Gogs (self-hosted Git service)CVE ID: CVE-2025-8110CVSS v3.1 Score: 9.8 / 10Severity: CriticalExploitability: High (low attack complexity,…continue reading..
Critical React Router & Remix Vulnerabilities (CVE-2026-21884 and CVE-2025-61686) CyberSecurity News CyberDefenderJanuary 12, 2026January 12, 20263 mins0 CVE-2026-21884 Type: Cross-Site Scripting (XSS)Affected Software: React Router / @remix-run/reactSeverity: High (per NVD advisory) Description:This issue exists…continue reading..
CVE-2025-68637: Critical Man-in-the-Middle Vulnerability in Apache Uniffle Due to Insecure SSL Validation CyberSecurity News CyberDefenderJanuary 12, 2026January 12, 20262 mins0 CVE-2025-68637 is a critical security flaw in the Apache Uniffle project’s HTTP client implementation. Vulnerability Details Impact…continue reading..
CVE-2026-22184 — Critical Buffer Overflow in zlib’s untgz Utility CyberSecurity News CyberDefenderJanuary 12, 2026January 12, 20263 mins0 CVE-2026-22184 is a critical software vulnerability found in the zlib compression library (versions up to and including…continue reading..
CVE-2025-68493: Critical XML Validation Vulnerability in Apache Struts CyberSecurity News CyberDefenderJanuary 12, 2026January 12, 20265 mins0 CVE-2025-68493 is a recently published security vulnerability in the widely used Apache Struts framework, affecting a broad…continue reading..
Critical Vulnerability Found in Advantech Products: Singapore’s CSA Issues High-Severity Alert CyberSecurity News CyberDefenderJanuary 12, 2026January 12, 20264 mins0 The Cyber Security Agency of Singapore (CSA) has publicly issued an alert regarding a critical security flaw…continue reading..
CVE-2026-22601: When a Simple Email Setting Turns OpenProject into a Command Execution Gateway Vulnerabilities AegironJanuary 11, 2026January 11, 20267 mins0 Title: OpenProject Sendmail Path Manipulation Leading to Command ExecutionCVE ID: CVE-2026-22601Affected Product: OpenProjectVulnerability Type: OS Command Injection…continue reading..
CVE-2026-0830: Developer Workstations at Risk from Kiro IDE GitLab Command Injection Vulnerabilities AegironJanuary 11, 2026January 11, 20267 mins0 Vulnerability Summary Field Details CVE ID CVE-2026-0830 Vulnerability Type Command Injection (Improper Input Validation) Affected Component Kiro…continue reading..
CVE-2025-15501 & CVE-2025-15500: Critical Unauthenticated OS Command Injection in Sangfor O&M Enabling Remote Root-Level System Takeover Vulnerabilities AegironJanuary 11, 2026January 11, 20269 mins0 Affected Product Information Product Vendor Component Typical Exposure Sangfor O&M Platform Sangfor Operations & Maintenance Management Service…continue reading..
CVE-2026-22584: Silent Code Execution Through Trusted Data Files in Salesforce Uni2TS Vulnerabilities AegironJanuary 11, 2026January 11, 20269 mins0 CVE ID: CVE-2026-22584Product Affected: Salesforce Uni2TS (Universal Integration to Transformation Service)Vulnerability Type: Code Injection due to unsafe…continue reading..
