CVE-2026-9848 — Vulnerability brief
CVE-2026-9848 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2025-24813: Apache Tomcat Remote Code Execution Vulnerability
CVE-2025-24813 is a remote code execution flaw in Apache Tomcat disclosed in March 2025 and added to CISA's Known Exploited Vulnerabilities catalog.…
DifyTap Vulnerabilities Expose AI Chat Data Across Tenants in Open-Source Platform Dify
Cybersecurity researchers at Zafran Security have disclosed four vulnerabilities in Dify, an open-source agentic workflow platform with over 146,000 GitHub stars, collectively…
CVE-2024-5846: Use-After-Free in PDFium Affecting Dify
A use-after-free vulnerability in PDFium, an open-source C++ library for PDF rendering, with a CVSS score of 8.8. It could allow a…
CVE-2026-41947: Authorization Bypass in Dify Trace Configurations
A critical authorization bypass vulnerability (CVSS 9.1) in Dify that allows authenticated editor users to set and enable trace configurations for any…
CVE-2026-41948: Path Traversal in Dify Plugin Daemon API
A critical path traversal vulnerability (CVSS 9.4) in Dify that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal…
CVE-2026-41949: Authorization Bypass in Dify File Preview Endpoint
An authorization bypass vulnerability (CVSS 7.5/5.9) in Dify's file preview endpoint that allows any authenticated user to read up to 3,000 characters…
CVE-2026-41950: Authorization Bypass in Dify File Read Within Tenant
An authorization bypass vulnerability (CVSS 6.5) in Dify that allows authenticated users to read the full contents of files uploaded by other…
Squid Cache Digest Heap Overflow
An unrelated heap overflow vulnerability in Squid's cache_digest functionality, patched in Squid 7.6.
29-Year-Old Squid Proxy Bug ‘Squidbleed’ Leaks Cleartext HTTP Requests
A critical heap over-read vulnerability in the Squid web proxy, dubbed 'Squidbleed' (CVE-2026-47729), can leak cleartext HTTP requests—including credentials and session tokens—to…