CVE-2025-64121: Critical Authentication Bypass Exposes Nuvation Energy MSC to Full Remote Control Vulnerabilities AegironJanuary 3, 2026January 3, 20269 mins0 Executive Summary (At a Glance) This vulnerability allows an attacker to bypass authentication controls and gain unauthorized…continue reading..
CVE-2026-21440: Silent File Upload Flaw That Can Let Attackers Take Over Your AdonisJS Server Vulnerabilities AegironJanuary 3, 2026January 3, 20267 mins0 Framework: AdonisJSAffected Package: @adonisjs/bodyparserCVE ID: CVE-2026-21440Vulnerability Class: Path Traversal leading to Arbitrary File WriteCWE: CWE-22 – Improper…continue reading..
CVE-2026-21452: MessagePack for Java EXT32 Deserialization Allows Remote Heap Exhaustion Vulnerabilities AegironJanuary 3, 2026January 3, 20269 mins0 CVE Identifier: CVE-2026-21452 Vulnerability Title: Unbounded Heap Allocation During EXT32 Deserialization in MessagePack for Java Affected Software:…continue reading..
Critical Bagisto Security Flaws Expose Full System Takeover and Remote Code Execution (CVE-2026-21446, CVE-2026-21448) Vulnerabilities AegironJanuary 3, 2026January 3, 20267 mins0 CVE-2026-21446 – Bagisto Installer API Authentication Bypass Product: BagistoAffected Versions: 2.3.0 – 2.3.9Fixed Version: 2.3.10 Severity Exploitability…continue reading..
CVE-2026-21445: Critical Langflow API Exposure Allows Unauthenticated Access to Conversations, Transactions, and Data Deletion Vulnerabilities AegironJanuary 3, 2026January 3, 20269 mins0 CVE ID: CVE-2026-21445Product: LangflowVulnerability Type: Missing Authentication / Broken Access ControlAffected Versions: All versions prior to 1.7.0.dev45Fixed…continue reading..
Multiple High-Risk Vulnerabilities in Emlog CMS Enable Account Takeover and Server-Side Attacks Vulnerabilities AegironJanuary 3, 2026January 3, 20268 mins0 Product Details Advisory Overview Multiple security vulnerabilities have been identified in Emlog, affecting versions up to 2.5.23.…continue reading..
Active Zero-Day Exploitation: React2Shell RCE Driving Large-Scale Linux Botnet Infection Cyber Threat Intelligence AegironJanuary 3, 2026January 3, 202616 mins0 Executive Summary On January 2, 2026, security researchers from CloudSEK and SecurityWeek publicly disclosed a critical zero-day…continue reading..
CVE-2025-15414: High-Impact SSRF Flaw in go-sonic Theme Fetching API Enables Internal Network & Cloud Metadata Exposure Vulnerabilities AegironJanuary 2, 2026January 2, 202612 mins0 CVE ID: CVE-2025-15414CVSS Score: 8.1Severity: HighAttack Vector: NetworkAttack Complexity: LowPrivileges Required: LowUser Interaction: NoneScope: UnchangedConfidentiality Impact: HighIntegrity…continue reading..
CVE-2026-0546: Unauthenticated SQL Injection Exposes Code-Projects CMS Databases to Remote Attack Vulnerabilities AegironJanuary 2, 2026January 2, 20269 mins0 Vulnerability Summary Executive Overview CVE-2026-0546 is a high-severity SQL injection vulnerability affecting the search functionality of Code-Projects…continue reading..
CVE-2026-21437: When Your Package Manager Becomes a Blind Spot Vulnerabilities AegironJanuary 2, 2026January 2, 202612 mins0 CVE: CVE-2026-21437Product: eopkg — Solus Linux package managerAffected Versions: versions prior to 4.4.0Patched Version: 4.4.0Severity (Vendor /…continue reading..
