Trending CVEs

Vulnerability: A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway allows unauthenticated remote attackers to execute arbitrary commands with root privileges on the underlying operating system through crafted email messages containing malicious SQL statements.

Trending: The vulnerability is trending due to active exploitation in the wild, with Cisco PSIRT confirming active exploitation as of September 2026, leading to significant security community attention and zero-day discussions across social media platforms.

Vulnerability: The Issabel Framework, which powers Issabel PBX software, contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across all installations before commit b97dbaf. This allows unauthenticated remote attackers to forge valid bearer tokens and execute arbitrary OS commands as the Asterisk user by calling the manager originate endpoint.

Trending: The vulnerability is receiving significant attention across social media platforms due to its critical CVSS 9.3 severity rating and evidence of exploitation observed by the Shadowserver Foundation starting September 9, 2026. Multiple security-focused accounts on Bluesky and Mastodon are actively sharing details about the vulnerability and its implications for Issabel PBX installations.

Vulnerability: CVE-2026-85706 is a critical GitLab vulnerability with a CVSS 10.0 score that could expose source code. The vulnerability affects GitLab servers and requires immediate patching.

Trending: The vulnerability is trending due to its critical severity rating (CVSS 10.0) and the potential for source code exposure, prompting security advisories urging GitLab users to update their servers immediately to mitigate the risk.

Vulnerability: Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability in the nc.impl.pub.filesystem.FileManageServlet component that allows remote unauthenticated attackers to execute arbitrary OS commands by sending a serialized payload via POST request. The vulnerability exists because the doAction method passes raw HTTP request body data directly to ObjectInputStream.readObject() without filtering.

Trending: The vulnerability is trending due to its critical severity rating (CVSS 9.3-9.8), public exploit availability, and active exploitation evidence first observed by the Shadowserver Foundation on 2025-02-13. Multiple security researchers and threat intelligence platforms are actively discussing and sharing details about this vulnerability across social media platforms.

Vulnerability: FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can exploit this by sending incompatible protocol requests and then completing a TLS handshake to bypass pre-authentication transport restrictions.

Trending: This vulnerability is receiving attention across social media platforms due to its critical CVSS 9.2 severity rating and the fact that it affects widely-used remote desktop software. The posts highlight that the flaw allows network-based attackers to circumvent server security policies without authentication, making it a significant concern for organizations running vulnerable FreeRDP versions.

Vulnerability: atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses and inject arbitrary command and argument values that are spawned as local subprocesses by MCPClientPool to achieve code execution on the agent host.

Trending: The vulnerability is receiving attention across social media platforms with a CVSS 9.2 critical severity rating, with multiple cybersecurity accounts sharing alerts about the flaw and its potential for remote code execution through network interception attacks.

Vulnerability: The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress versions up to 1.2.3 contains an authorization bypass vulnerability that allows unauthenticated attackers to modify email addresses of arbitrary user accounts, including administrators, enabling password resets and account takeover.

Trending: This vulnerability is trending due to its critical CVSS 9.8 severity rating and the ease of exploitation by unauthenticated attackers. Social media posts across Bluesky and Mastodon are highlighting the risk and recommending immediate mitigation measures such as restricting plugin access and monitoring for suspicious account changes.

Vulnerability: @zereight/mcp-gitlab versions prior to 2.1.27 expose all MCP tools without authentication when SSE transport mode is enabled, allowing unauthenticated attackers to read arbitrary files from the server's filesystem and steal GitLab personal access tokens, leading to full account takeover. This vulnerability affects the default Docker deployment configuration.

Trending: The vulnerability is receiving significant attention across social media platforms with a CVSS 9.8 critical severity rating, with multiple security-focused accounts sharing alerts about the issue and its potential for immediate exploitation in default configurations.

Vulnerability: Http4s Ember HTTP/1.1 prior to versions 0.23.35 and 1.0.0-M47 fails to reject messages containing both Transfer-Encoding and Content-Length headers, allowing request smuggling attacks. An attacker can exploit this to bypass access controls, poison caches, desynchronize connections, or join victim requests to attacker-controlled prefixes when the server is behind a keep-alive intermediary.

Trending: CVE-2026-69204 is receiving significant attention across social media platforms with a CVSS 9.2 CRITICAL severity rating. Multiple cybersecurity accounts on Bluesky and Mastodon are actively sharing alerts about this vulnerability, indicating widespread awareness in the infosec community.

Vulnerability: CVE-2026-73461 is an authorization bypass vulnerability affecting Arista EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, where authenticated users may receive incorrect privilege levels during gRPC requests, resulting in authorization using the wrong AAA method list. Non-gRPC OpenConfig requests such as NETCONF are not impacted.

Trending: The vulnerability is receiving attention across social media platforms with a CVSS score of 9.4 (Critical), with multiple cybersecurity accounts sharing alerts and details about the flaw on Bluesky and Mastodon, highlighting the risk to Arista Networks EOS switch deployments.

Vulnerability: A critical vulnerability in the Oracle Internet Directory component of Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.1.0) allows low-privileged attackers with network access via LDAP to compromise the system and potentially take over Oracle Internet Directory, with impacts extending to additional products (CVSS 3.1 score: 9.9).

Trending: The vulnerability is receiving attention across social media platforms including Bluesky and Mastodon, with security researchers and infosec communities highlighting its critical CVSS 9.9 rating and the ease of exploitation for attackers with low-level network access.

Vulnerability: A critical vulnerability in Oracle Internet Directory (OID LDAP Server component) affecting versions 12.2.1.4.0 and 14.1.2.1.0 allows low-privileged attackers with network access via LDAP to compromise the system and potentially impact additional Oracle Fusion Middleware products. The vulnerability has a CVSS 3.1 score of 9.9 with high impacts on confidentiality, integrity, and availability.

Trending: The vulnerability is receiving attention across social media platforms including Bluesky and Mastodon, with security researchers and infosec communities highlighting its critical CVSS 9.9 rating and the ease of exploitation by low-privilege network users.

Vulnerability: A critical vulnerability exists in the Oracle Internet Directory component of Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.1.0) in the OID LDAP Server. The easily exploitable flaw allows a low-privileged attacker with network access via LDAP to achieve complete compromise of Oracle Internet Directory with potential impact to additional products, resulting in CVSS 3.1 score of 9.9.

Trending: The vulnerability is receiving attention across social media platforms including Bluesky and Mastodon, with multiple posts highlighting its critical CVSS 9.9 rating and broad impact scope. Security researchers and information security communities are actively sharing details about the affected Oracle Fusion Middleware versions and the ease of exploitation.

Vulnerability: A critical vulnerability in the Oracle Internet Directory component of Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.1.0) allows a low-privileged attacker with network access via LDAP to compromise the system and potentially take over Oracle Internet Directory, with impacts extending to additional products (CVSS 3.1 score: 9.9).

Trending: The vulnerability is receiving attention across social media platforms including Bluesky and Mastodon, with multiple posts highlighting its critical CVSS 9.9 rating and ease of exploitation by low-privileged attackers with network access.

Vulnerability: A critical unauthenticated remote code execution vulnerability exists in the Oracle Internet Directory component of Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.1.0), accessible via LDAP without authentication. Successful exploitation allows complete takeover of Oracle Internet Directory with potential impact to additional products.

Trending: The vulnerability is receiving significant attention across security communities on social media platforms due to its critical CVSS 10.0 severity rating and ease of exploitation, with multiple security accounts highlighting the unauthenticated network access requirement and potential for widespread impact.

Vulnerability: CVE-2026-83064 is a vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (Runtime Tools) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise the system, potentially resulting in complete takeover with impacts to confidentiality, integrity, and availability (CVSS 3.1 Base Score 9.1).

Trending: The vulnerability is receiving attention across social media platforms including Bluesky and Mastodon, with security researchers and infosec communities highlighting its critical CVSS 9.1 rating and sharing technical details and tracking resources for the affected Oracle Fusion Middleware versions.

Vulnerability: CVE-2026-83268 is an easily exploitable vulnerability in Oracle BI Publisher (component: BI Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A high-privileged attacker with network access via HTTP can achieve complete takeover of Oracle BI Publisher with potential impact to additional products (CVSS 3.1 Base Score: 9.1).

Trending: The vulnerability is receiving attention across social media platforms including Bluesky and Mastodon, where cybersecurity accounts are flagging it as critical and sharing technical details about affected versions and exploitation vectors.

Vulnerability: CVE-2026-83282 is an easily exploitable vulnerability in Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 (component: Platform Security) that allows a low-privileged attacker with network access via HTTP to achieve complete system compromise with high impact on confidentiality, integrity, and availability.

Trending: The vulnerability is receiving attention across security-focused social media platforms due to its critical CVSS 3.1 score of 9.9 and the ease of exploitation, with multiple cybersecurity accounts sharing alerts and details about the flaw.

Vulnerability: A critical vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000 (component: Security) allows low-privileged attackers with network access via HTTP to compromise the system and potentially achieve complete takeover, with impacts extending to additional products due to scope change.

Trending: The vulnerability is receiving attention across social media platforms including Bluesky and Mastodon, where security researchers and cybersecurity accounts are highlighting its critical CVSS 9.9 severity rating and ease of exploitation by low-privileged attackers.

Vulnerability: A critical vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000 (component: Security) allows unauthenticated attackers with physical access to the communication segment to compromise the system and potentially impact additional products. The vulnerability has a CVSS 3.1 Base Score of 9.6 and can result in complete takeover of Oracle Hyperion Financial Management.

Trending: The vulnerability is receiving attention across social media platforms including Bluesky and Mastodon, with security researchers and cybersecurity accounts highlighting its critical CVSS 9.6 rating and sharing details about the easily exploitable nature of the flaw affecting Oracle Hyperion Financial Management.

Vulnerability: A CWE-78 OS command injection vulnerability exists in the edgserver management service of Advantech EKI-1242EIMS firmware version V1.06.01, allowing remote unauthenticated attackers to execute arbitrary OS commands as root via crafted requests to TCP port 5058.

Trending: The vulnerability is receiving significant attention across security social media platforms due to its critical CVSS 9.3 severity rating and the ease of exploitation, with multiple security researchers highlighting the remote code execution risk and recommending immediate access restrictions and monitoring of affected devices.

Vulnerability: CVE-2026-89857 is a critical vulnerability in the Linux kernel's QLA2XXX SCSI driver affecting NVMe LS reject handling. The flaw occurs when qla_nvme_ls_reject_iocb() is called without proper locking, allowing concurrent access to the request ring that can corrupt ring producer state and lead to duplicated or dropped commands.

Trending: The vulnerability is receiving attention across security-focused social media platforms with a CVSS 9.8 critical severity rating. Multiple cybersecurity accounts on Bluesky and Mastodon are actively sharing details about the flaw and its potential impact on Linux systems using QLogic Fibre Channel storage.

Vulnerability: A coding error in the Linux kernel for 64-bit ARM systems omits required sign extension in the decode_range_tlbi() helper function, causing address calculation overflows when clearing certain memory ranges during KVM TLB invalidation operations. This affects KVM on ARM64 platforms and can lead to system instability.

Trending: The vulnerability is receiving attention across security-focused social media platforms due to its CVSS 9.3 critical severity rating and potential for system instability through memory address calculation errors in a core kernel component.

Vulnerability: A race condition in the Linux kernel's ARM64 KVM implementation allows a VNCR TLB invalidation on one virtual CPU to occur while another virtual CPU is faulting in the same page, potentially resulting in stale memory address translations being used. This affects the Linux kernel on ARM64 systems and can cause applications to access incorrect data.

Trending: CVE-2026-89916 is receiving attention across social media platforms with a CVSS 9.3 CRITICAL severity rating. Security researchers and infosec communities are actively discussing and sharing information about this vulnerability through posts on Bluesky and Mastodon, highlighting the potential impact of incorrect memory translations in kernel operations.

Vulnerability: A flaw in the Linux kernel's KVM ARM64 implementation fails to properly invalidate TLB entries when address ranges reach the end of virtual address space due to address rollover in the comparison logic. This affects TLB invalidation by virtual address in the Linux kernel's ARM64 virtual machine component.

Trending: The vulnerability is receiving attention across security-focused social media platforms with mentions highlighting its CVSS 9.3 critical severity rating and the potential for stale data to persist in memory when address invalidation fails at VA space boundaries.

Vulnerability: An out-of-bounds write issue affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

Trending: CVE-2026-65414 is receiving significant social media attention with a CVSS 9.8 critical severity rating, with multiple posts across Bluesky and Mastodon highlighting the vulnerability's critical nature and widespread impact across Apple's ecosystem.

Vulnerability: CVE-2026-76441 involves improper access control vulnerabilities (CWE-284) in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager that could allow unauthorized users to perform restricted actions. These vulnerabilities were discovered during Cisco's internal security review and addressed through software hardening releases.

Trending: The vulnerability is receiving significant attention across social media platforms with a CVSS 9.8 critical severity rating, generating multiple posts on Bluesky and Mastodon highlighting the critical nature of the access control weaknesses affecting Cisco's email security products.

Vulnerability: Dell SmartFabric OS10 Software versions prior to 10.6.1.3 contain a Download of Code Without Integrity Check vulnerability that allows a high privileged attacker with remote access to potentially execute arbitrary code on affected systems.

Trending: The vulnerability is receiving significant attention across social media platforms due to its critical CVSS 9.1 severity rating, with multiple cybersecurity accounts on Bluesky and Mastodon actively sharing alerts and details about the flaw.

Vulnerability: A command injection vulnerability exists in the /api/iodd/config endpoint that allows a high-privileged remote attacker with admin credentials to execute arbitrary commands with root privileges on affected devices. The vulnerability impacts industrial automation devices from multiple manufacturers including Carlo Gavazzi Automation (YL212* and YN115* series), Phoenix Contact (IOL MA8 EIP DI8 and IOL MA8 PN DI8), and Pepperl+Fuchs (ICE2-* and ICE3-* series).

Trending: CVE-2026-27561 is trending due to multiple coordinated CSAF security advisories published by VDE covering widespread vulnerabilities across several industrial automation device manufacturers, indicating a significant security issue affecting critical infrastructure and industrial control systems.

Vulnerability: A command injection vulnerability exists in the /api/iodd/config endpoint that allows a high-privileged remote attacker to execute arbitrary commands with root privileges on affected devices by sending a crafted PUT request with admin credentials. The vulnerability affects industrial automation devices from multiple manufacturers including Carlo Gavazzi Automation, Phoenix Contact, and Pepperl+Fuchs.

Trending: CVE-2026-27562 is trending due to multiple coordinated CSAF security advisories published by VDE covering widespread vulnerabilities across several industrial device product lines, indicating a significant security issue affecting multiple vendors' equipment in the industrial automation sector.

Vulnerability: A command injection vulnerability in the /api/datastorage/data endpoint allows high-privileged remote attackers to execute arbitrary commands with root privileges on affected devices by sending a crafted GET request with admin credentials. The vulnerability affects multiple industrial automation devices including Carlo Gavazzi Automation YL212* and YN115* series, Phoenix Contact IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices, and Pepperl+Fuchs ICE2-* and ICE3-* series.

Trending: Multiple CSAF security advisories have been published by VDE covering this vulnerability across several industrial automation manufacturers, indicating widespread impact across the industrial control systems sector. The vulnerability is part of a larger set of security issues affecting these device families, suggesting coordinated disclosure efforts in the industrial automation community.

Vulnerability: A command injection vulnerability exists in the /api/datastorage/data endpoint that allows high-privileged remote attackers to execute arbitrary commands with root privileges on affected devices by sending a PUT request with admin credentials. The vulnerability affects multiple industrial automation devices including Carlo Gavazzi Automation YL212* and YN115* series, Phoenix Contact IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices, and Pepperl+Fuchs ICE2-* and ICE3-* series.

Trending: The vulnerability is trending due to multiple coordinated CSAF security advisories published by VDE covering affected devices from three major industrial automation manufacturers, indicating widespread impact across industrial control systems and IoT infrastructure.

Vulnerability: An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges on affected industrial automation devices. The vulnerability impacts multiple products including Carlo Gavazzi Automation YL212* and YN115* series, Phoenix Contact IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices, and Pepperl+Fuchs ICE2-* and ICE3-* series.

Trending: The vulnerability is trending due to multiple coordinated VDE security advisories affecting several major industrial automation manufacturers, indicating widespread impact across the industrial control systems sector. The issue has garnered attention from the information security community through official CSAF advisory publications covering at least three major vendors.

Vulnerability: libssh2 through 1.11.1 contains a double-free vulnerability in the sftp_open() function that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. The vulnerability occurs when specific error conditions are triggered during SFTP packet handling, enabling heap corruption and potential function pointer overwrites on glibc systems.

Trending: The vulnerability is receiving attention across security-focused social media platforms including Bluesky and Mastodon, with posts highlighting its high severity rating (8.8) and sharing details about the affected libssh2 versions and the available fix in commit 5e47761.

Vulnerability: libssh2 through version 1.11.1 contains a missing bounds check vulnerability in the publickey subsystem that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and free an uninitialized pointer, potentially leaking heap pointers and corrupting heap allocator state.

Trending: The vulnerability is being actively shared across social media platforms including Bluesky and Mastodon with a CVSS score of 7.5 (High severity), with security researchers and infosec communities flagging it as a notable threat requiring patching.

Vulnerability: An unauthenticated OS command injection vulnerability exists in the ping.php endpoint of TREXOM TrxTimeATTENDANCE versions 1.0.5 through 1.9.5, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code execution.

Trending: The vulnerability is receiving attention on social media as a critical remote code execution risk affecting the TrxTimeATTENDANCE attendance management system, with security researchers urging users to patch or restrict access to the vulnerable endpoint immediately.

Vulnerability: UEFI Firmware Parser versions prior to 1.14 contain a stack buffer overflow in the MakeTable() function that fails to validate bit-length values from crafted Tiano or EFI compressed firmware bitstreams, potentially allowing code execution or denial of service when parsing BIOS, Intel ME, and UEFI firmware structures.

Trending: The vulnerability is receiving attention across security-focused social media platforms with a CVSS 9.8 critical rating, with multiple cybersecurity accounts highlighting the severity and technical details of the stack corruption issue affecting firmware parsing tools.

Vulnerability: CVE-2026-54334 is a heap memory corruption vulnerability in UEFI Firmware Parser versions prior to 1.14 that affects the parsing of BIOS, Intel ME, and UEFI firmware structures. The flaw in the ReadCLen() function allows crafted Tiano or EFI compressed firmware to corrupt heap memory, crash the parsing process, and potentially execute arbitrary code.

Trending: The vulnerability is receiving attention across social media platforms with a CVSS 9.8 critical severity rating. Security researchers and cybersecurity accounts are actively sharing alerts about the vulnerability, highlighting the risk posed by specially crafted firmware files that can exploit the memory corruption flaw.

Vulnerability: CVE-2026-59310 is a directory traversal flaw that was patched by Broadcom in VMware products.

Trending: The vulnerability is receiving attention as part of a coordinated security update from Broadcom that also addressed a critical VMware authentication bypass (CVE-2026-59309), generating discussion in cybersecurity communities.

Vulnerability: CVE-2026-67399 is a critical unauthenticated remote code execution flaw in WHMCS, a billing platform widely used by hosting firms. The vulnerability affects WHMCS versions 9.x before 9.0.8 and 8.x before 8.13.7, allowing an unauthenticated attacker to execute arbitrary code on affected servers.

Trending: The vulnerability is trending due to urgent patch advisories across social media platforms emphasizing the critical nature of the flaw and the lack of available workarounds, with security researchers calling for immediate patching of affected systems.

Vulnerability: CVE-2026-20353 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, involving improper control of resources through their lifetime (CWE-664). The vulnerabilities were discovered during an internal security review and addressed through software hardening releases.

Trending: The vulnerability is receiving attention on social media platforms with a CVSS 9.8 critical severity rating being highlighted. Posts indicate that the flaws could allow attackers to manipulate how the system handles internal resources, potentially leading to service disruption.

Vulnerability: CVE-2026-76440 involves path traversal issues (CWE-23) in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager that could allow attackers to access files they should not be able to view, potentially exposing sensitive information. The vulnerabilities were discovered during Cisco's internal security review and addressed through software hardening releases.

Trending: The vulnerability is receiving attention on social media platforms due to its critical CVSS 9.8 severity rating and the potential for unauthorized file access and information disclosure in widely-used Cisco email security products.

Vulnerability: CVE-2026-76443 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, involving improper neutralization issues (CWE-707) that could allow specially crafted email content to evade security checks and reach users.

Trending: The vulnerability is receiving significant attention across social media platforms with a CVSS 9.8 critical severity rating, with multiple posts on Bluesky and Mastodon highlighting the risk of harmful content bypassing security controls in affected Cisco email products.

Vulnerability: Crawlab through version 0.6.3 contains a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables, allowing unauthenticated attackers to forge valid administrator tokens and access administrative APIs or execute code on worker nodes.

Trending: The vulnerability is receiving attention across security-focused social media platforms including Bluesky and Mastodon, with multiple infosec accounts sharing alerts about the critical 9.8 severity rating and the ease with which attackers can forge administrator tokens due to the unchangeable hard-coded secret.

Vulnerability: CVE-2026-45579 is an authenticated command execution vulnerability in DIRAC that allows authenticated users to run arbitrary commands on the DIRAC server, enabling access to sensitive information, deletion of evidence, and potential system takeover.

Trending: The vulnerability is gaining attention in security communities due to its severity, allowing authenticated attackers to execute commands and compromise system integrity, with discussions occurring across infosec channels on platforms like Bluesky.

Vulnerability: CVE-2026-61667 is a security flaw in the DIRAC FileCatalog DatasetManager that allows an authenticated user to execute malicious code on the system through an unsecured SQL query that can be manipulated.

Trending: The vulnerability is gaining attention on social media platforms like Bluesky, where security researchers are highlighting the code execution risk and drawing awareness to the flaw in the DIRAC project.

Vulnerability: Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporated into SQL queries without sanitization. Attackers can exploit this flaw to execute arbitrary SQL commands and, on Microsoft SQL Server deployments with xp_cmdshell enabled, write backdoor files and execute arbitrary operating system commands.

Trending: The vulnerability is receiving attention across social media platforms with a CVSS 9.3 critical severity rating, with security researchers actively sharing details about the flaw and exploitation evidence first observed by the Shadowserver Foundation on 2025-02-13.

Vulnerability: motionEye (mEye) prior to version 0.44.0 accepts client-controlled authentication cookies without server-side session validation, allowing unauthenticated attackers to impersonate users including administrators. The vulnerability affects video surveillance systems using motionEye and can enable account lockout, password changes, data destruction, and data exfiltration.

Trending: The vulnerability is receiving attention across social media platforms due to its critical CVSS 9.1 severity rating and the fact that administrator credentials are stored in a globally readable configuration file, making exploitation accessible to local users.

Vulnerability: Surfio, a library for reading and writing surface files, contains a buffer overflow vulnerability in versions prior to 0.0.19 due to improper validation of size fields in IRAP files. The vulnerability affects systems that parse untrusted files, particularly in networking contexts such as web services.

Trending: The vulnerability is receiving attention across social media platforms with a CVSS 9.8 critical severity rating, generating cybersecurity and information security community engagement on Bluesky and Mastodon.

Vulnerability: CVE-2026-59160 is a high-severity vulnerability in Yeger's turbo-graph package prior to version 2.8.9, where an unauthenticated GET handler at /api/run accepts arbitrary task parameters and passes them to the Turbo CLI without authorization, allowing adjacent-network attackers to execute any task defined in the repository's turbo.json with developer privileges.

Trending: The vulnerability is receiving attention on social media platforms including Bluesky and Mastodon, with security news outlets like The Hacker Wire reporting on the high CVSS score of 8.8 and the potential for unauthorized task execution that could expose secrets or modify infrastructure.