CVE-2026-3277: PowerShell Universal Exposes OIDC Client Secret in Cleartext, Enabling Service Impersonation Risks Vulnerabilities AegironMarch 2, 2026March 2, 202610 mins0 CVE-2026-3277 Product: PowerShell UniversalVendor: DevolutionsVulnerability Type: Cleartext Storage of Sensitive InformationCWE: CWE-312CVSS v4.0: 6.8Severity: MediumAttack Vector: Local…continue reading..
Critical Security Alert: Multiple Zero-Day-Style Flaws in n8n Could Allow Full Server Takeover — Immediate Patching Strongly Advised Vulnerabilities AegironMarch 2, 2026March 2, 202611 mins0 Product Overview Product: n8nVendor: n8n GmbHType: Workflow Automation & Integration PlatformCore Technology: Node.js (TypeScript), Express backend, SQLite/PostgreSQL,…continue reading..
CVE-2026-27812: Sub2API Password Reset Flaw Allows Account Takeover via Host Header Manipulation Vulnerabilities AegironMarch 2, 2026March 2, 20269 mins0 Sub2API Password Reset Poisoning via Host Header Manipulation CVE ID: CVE-2026-27812Product: Sub2APIAffected Versions: Versions prior to 0.1.85Fixed…continue reading..
CVE-2026-27966: Critical Langflow CSV Agent Flaw Exposes Servers to Unauthenticated Remote Code Execution Vulnerabilities AegironMarch 2, 2026March 2, 20269 mins0 Langflow CSV Agent Remote Code Execution via hardcoded allow_dangerous_code=True A critical remote code execution vulnerability was identified…continue reading..
CVE-2026-2441: Actively Exploited Chrome Zero-Day Enables Remote Code Execution via Crafted Web Pages Vulnerabilities AegironMarch 1, 2026March 1, 202610 mins0 Vulnerability Overview CVE ID: CVE-2026-2441Component Affected: Google Chrome / Chromium (Blink rendering engine – CSS handling)Vulnerability Type:…continue reading..
CVE-2026-3202: Wireshark NTS-KE Parser Flaw Triggers Crash, Disrupting Network Analysis Workflows Vulnerabilities AegironMarch 1, 2026March 1, 20269 mins0 Wireshark NTS-KE Dissector Crash – Denial of Service CVE ID: CVE-2026-3202Affected Product: WiresharkAffected Versions: 4.6.0 through 4.6.3Fixed…continue reading..
CVE-2026-27597: Critical Enclave VM Sandbox Escape Enables Full Remote Code Execution on Host Systems Vulnerabilities AegironMarch 1, 2026March 1, 202610 mins0 CVE-2026-27597 CVE ID: CVE-2026-27597Product: Enclave VM (@enclave-vm/core)Vulnerability Type: JavaScript Sandbox Escape → Remote Code Execution (RCE)Affected Versions:…continue reading..
CVE-2026-27692: Crafted ICC Profile Triggers Heap Overflow in iccDEV, Causing Application Crashes and Potential Memory Exposure Vulnerabilities AegironMarch 1, 2026March 1, 20269 mins0 Heap Buffer Overflow in iccDEV (Crafted ICC Profile Crash) Field Value CVE ID CVE-2026-27692 Affected Product iccDEV…continue reading..
CVE-2026-25785: Critical LANSCOPE Endpoint Manager Flaw Enables Unauthenticated Remote Code Execution via Path Traversal Vulnerabilities AegironMarch 1, 2026March 1, 20268 mins0 LANSCOPE Endpoint Manager (On-Premises) – Path Traversal Leading to Arbitrary File Tampering and Remote Code Execution CVE…continue reading..
CVE-2026-2244: Google Vertex AI Workbench Flaw Enables Cross-Tenant Account Takeover via OAuth Token Theft Vulnerabilities AegironMarch 1, 2026March 1, 202610 mins0 Google Cloud Vertex AI Workbench – Privilege Escalation via Credential Exposure CVE ID: CVE-2026-2244Product: Google Cloud Vertex…continue reading..
