CVE-2026-25580: High-Risk SSRF Flaw in Pydantic AI Exposes Internal Networks and Cloud Metadata
CVE-2026-25580 – Server-Side Request Forgery (SSRF) in Pydantic AI Field Details CVE Name Pydantic AI URL Download…
continue reading..
CVE-2026-0106: Critical Linux VPU Driver Flaw Opens Door to Local Root Privilege Escalation
CVE-2026-0106 — Summary Table Field Details CVE ID CVE-2026-0106 Affected Platform Linux kernel Affected Component VPU (Video…
continue reading..
CVE-2026-21532: High-Severity Azure Functions Flaw Exposes Sensitive Configuration Data Over the Network
CVE-2026-21532 – Azure Function Information Disclosure Vulnerability Field Details Vulnerability Name Azure Function Information Disclosure Vulnerability CVE…
continue reading..
CVE-2026-24302: Critical Azure Arc Privilege Escalation Flaw Opens Door to Hybrid Tenant Compromise
CVE-2026-24302 CVE ID: CVE-2026-24302Product: Azure Arc (Connected Machine Agent / azcmagent)Vendor: MicrosoftVulnerability Type: Privilege EscalationCVSS v3.1 Base…
continue reading..
CVE-2026-24300: Critical Azure Front Door Flaw Opens Door to Remote Privilege Escalation and Platform Compromise
CVE-2026-24300 Product: Azure Front DoorVendor: MicrosoftVulnerability Type: Elevation of PrivilegeImpact Classification: Platform CompromiseCVSS v3.1 Base Score: 9.8…
continue reading..
CVE-2026-25592: Critical Flaw in Microsoft Semantic Kernel (.NET) Enables Arbitrary File Write and Potential Remote Code Execution
CVE-2026-25592 – Arbitrary File Write Leading to Code Execution Product: Microsoft Semantic Kernel (.NET)Component: SessionsPythonPluginCVE ID: CVE-2026-25592CVSS…
continue reading..
CVE-2026-1731: Critical BeyondTrust RS/PRA Flaw Allows Unauthenticated Remote Attackers to Take Full System Control
CVE-2026-1731 – BeyondTrust Remote Support (RS) / Privileged Remote Access (PRA) CVE ID: CVE-2026-1731Vendor: BeyondTrustAffected Products: Severity…
continue reading..
CVE-2025-64111: Critical Gogs Flaw Lets Remote Attackers Bypass Authorization and Execute Code on Servers
Overview CVE-2025-64111 is a critical authorization bypass leading to remote code execution (RCE) vulnerability identified in Gogs,…
continue reading..
CVE-2026-21643: Critical FortiClient EMS SQL Injection Flaw Opens Door to Remote Code Execution and Full System Takeover
Vulnerability Summary CVE ID: CVE-2026-21643Product: Fortinet FortiClient Enterprise Management Server (EMS)Affected Version: FortiClient EMS 7.4.4Vulnerability Type: SQL…
continue reading..
