CVE-2026-21622: Non-Expiring Password Reset Tokens in Hex.pm Expose Accounts to Silent Takeovers
Vulnerability Summary Field Details CVE ID CVE-2026-21622 Vulnerability Name Password Reset Tokens Never Expire Affected Platform Hex.pm…
continue reading..
Critical Flaws Discovered in OpenClaw AI Platform Could Allow Remote Command Execution and Identity Spoofing
OpenClaw Multiple Critical Vulnerabilities Product: OpenClaw AI Automation PlatformAffected Components: Core Engine, Gateway Service, Telegram Webhook Integration,…
continue reading..
CVE-2026-21536: Critical Microsoft Devices Pricing Program Flaw Allows Remote Code Execution Without Authentication
Vulnerability Summary Field Details CVE ID CVE-2026-21536 Vulnerability Name Microsoft Devices Pricing Program Remote Code Execution Vulnerability…
continue reading..
CVE-2026-3125: Cloudflare OpenNext Path Normalization Flaw Enables High-Risk SSRF Attacks on Next.js Deployments
CVE-2026-3125 — SSRF via Path Normalization Bypass in @opennextjs/cloudflare CVE ID: CVE-2026-3125Vulnerability Type: Server-Side Request Forgery (SSRF)Affected…
continue reading..
CVE-2026-29087: Authorization Bypass in Hono Node Server Could Expose Protected Static Files
Vulnerability Overview Field Details CVE ID CVE-2026-29087 Component @hono/node-server Vulnerability Type Authorization Bypass Severity High CVSS Score…
continue reading..
CVE-2026-28435: Critical Payload Size Bypass in cpp-httplib Enables Remote Denial-of-Service Attacks
CVE-2026-28435 Field Details CVE ID CVE-2026-28435 Vulnerability Name cpp-httplib Payload Size Limit Bypass Affected Software cpp-httplib HTTP/HTTPS…
continue reading..
CVE-2026-29128: Insecure Routing Daemon Configurations in IDC SFX2100 Receiver Expose Plaintext Credentials, Enabling Potential Network Manipulation
Vulnerability Summary Field Details CVE ID CVE-2026-29128 Affected Product IDC SFX2100 Satellite Receiver Vendor International Datacasting Corporation…
continue reading..
CVE-2026-20131: Maximum Severity Vulnerability in Cisco FMC Enables Remote Code Execution Without Authentication
CVE-2026-20131 – Cisco Secure Firewall Management Center Remote Code Execution CVE ID: CVE-2026-20131Vendor: CiscoAffected Product: Cisco Secure…
continue reading..
CVE-2025-58107: Critical Microsoft Exchange ActiveSync Flaw Exposes Email Credentials Through Network Traffic
Vulnerability Overview This vulnerability affects Microsoft Exchange servers where Exchange ActiveSync is used for mobile synchronization. Under…
continue reading..
