#cve
-
Critical SQLite CVEs Turned Out to Be AI Fabrications
The JFrog blog breaks down a series of SQLite “vulnerabilities,” some of which made it into authoritative databases — all of them entirely fabricated by language models.
-
Thermo Fisher Patches Flaw That Let Forensic DNA Files Be Tampered With Undetected
The company has released digitally signed updates for its Applied Biosystems software, but three legacy product lines won't get the fix. Researchers believe the flaw has existed in forensic lab files since 1995.
-
KindaRails2Shell: a Critical RCE Vulnerability in Rails via Active Storage
Ethiack researchers have disclosed CVE-2026-66066 in standard Ruby on Rails applications that use Active Storage with the vips processor. It allows arbitrary file reads and remote code execution.
-
Check Point Patches SmartConsole Flaw That Granted Administrator Rights
The company has released updates for its Security Management and Multi-Domain Management products, fixing among other things a critical flaw that is already being used in real-world attacks.
-
Windmill Vulnerability Lets Attackers Read Server Files Without Authorization
VulnCheck has recorded attacks on the open-source Windmill platform via a directory traversal vulnerability. Around 170 systems across 24 countries are at risk.
-
432 CVEs published for the Linux kernel in a single day
The official linux-cve-announce mailing list saw 432 vulnerability records for the Linux kernel appear in the last 24 hours.
-
A vulnerability allowing root privileges has been discovered in OpenBSD
A use-after-free vulnerability that lets a local user escalate privileges to root has been found in versions of OpenBSD up to and including 7.9. The vulnerability has been assigned the identifier CVE-2026-57589.
-
A Zero-Day Vulnerability Hidden for Over 19 Years Found in the Linux Kernel
A researcher discovered and reported to Google's kernelCTF a zero-day vulnerability in the Linux kernel that had gone unnoticed for more than 19 years. The vulnerability has been assigned the identifier CVE-2026-43456.
-
Information Published on the Bad Epoll Vulnerability (CVE-2026-46242)
A repository dedicated to a vulnerability named Bad Epoll, with the identifier CVE-2026-46242, has appeared in the public domain. Details remain extremely scarce for now.