CVE-2025-60534: When Trust Replaces Authentication in Blue Access Cobalt Vulnerabilities AegironJanuary 7, 2026January 7, 20269 mins0 CVE ID: CVE-2025-60534Product: Blue Access – CobaltVulnerability Type: Authentication BypassSeverity: CriticalCVSS (estimated): 9.8Attack Vector: Remote, unauthenticatedPrivileges Required:…continue reading..
CVE-2025-60262: Unauthenticated Root Takeover via FTP on H3C Wireless Controllers Vulnerabilities AegironJanuary 7, 2026January 7, 20267 mins0 Vulnerability Type: Authentication Bypass / Privilege EscalationAffected Component: FTP service (vsftpd) on H3C Wireless ControllersSeverity: CriticalCVSS v3.1…continue reading..
CVE-2026-21877: Critical n8n Arbitrary File Write Vulnerability Leading to Full Remote Code Execution Vulnerabilities AegironJanuary 7, 2026January 7, 202613 mins0 CVE Summary CVE ID: CVE-2026-21877Product: n8n (workflow automation platform)Vulnerability Type: Arbitrary File Write → Remote Code ExecutionSeverity:…continue reading..
CVE-2025-69356: Critical Local File Inclusion in TheGem Elementor Plugin Enables File Disclosure and Potential RCE Vulnerabilities AegironJanuary 7, 2026January 7, 202610 mins0 CVE ID: CVE-2025-69356Product: CodexThemes – TheGem (Theme Elements for Elementor)Component: Elementor integration / dynamic template handlingVulnerability Type:…continue reading..
CVE-2025-62877: Default SSH Credentials During Harvester Installation Enable Remote Host Takeover Vulnerabilities AegironJanuary 7, 2026January 7, 202610 mins0 Overview CVE-2025-62877 is a critical security issue affecting Harvester (SUSE Virtualization) when the platform is deployed using…continue reading..
CVE-2025-15385 Insufficient Verification of Data Authenticity in the TECNO Mobile Threat Advisories CyberDefenderJanuary 6, 2026January 6, 20262 mins0 Insufficient Verification of Data Authenticity in the TECNO Mobile com.Afmobi.Boomplayer app that can allow an authentication bypass.…continue reading..
CVE-2023-50897 — Media File Renamer plugin for WordPress Plugin Vulnerability Vulnerabilities CyberDefenderJanuary 6, 2026January 6, 20263 mins0 CVE-2023-50897 is a critical security vulnerability affecting the Media File Renamer plugin for WordPress (by Meow Apps).…continue reading..
CVE-2026-0621: Single-Request Denial of Service in MCP TypeScript SDK via Catastrophic Regex Backtracking Vulnerabilities AegironJanuary 6, 2026January 6, 20269 mins0 Vulnerability Overview (At-a-Glance) Executive Summary CVE-2026-0621 is a denial-of-service vulnerability caused by unsafe regular expression construction in…continue reading..
CVE-2025-15029 — Centreon Infra Monitoring (Awie Export) || CVE-2025-15026 — Centreon Infra Monitoring (Awie Import) Threat Advisories CyberDefenderJanuary 6, 2026January 6, 20264 mins0 CVE-2025-15029 — Centreon Infra Monitoring (Awie Export) Severity: CriticalVulnerability Type: Unauthenticated SQL Injection (CWE-89)Impact: Database compromise (data…continue reading..
CVE-2026-21439: badkeys Output Injection Allows Terminal Manipulation and CI/Audit Misrepresentation Vulnerabilities AegironJanuary 6, 2026January 6, 20268 mins0 Executive Summary (At a Glance) What Is the Vulnerability? This vulnerability occurs because badkeys prints user-supplied data…continue reading..
