CVE-2026-81707 — Critical vulnerability brief
CVSS 9.3openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-81702 — Critical vulnerability brief
CVSS 9.3openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity…
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories Ravie LakshmananAug 27, 2026Hacking News / Cybersecurity…
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both enabling unauthenticated remote code execution (RCE). The…
CVE-2026-75604 — Vulnerability brief
CVE-2026-75604 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
GHSA-2xp9-vwfh-vxw4: Next.js AVIF Image Processing Heap Buffer Overflow
A critical heap buffer overflow in libheif (CVSS v4 9.5) exploited via crafted AVIF images leads to remote code execution in Next.js…
GHSA-g89c-p67h-r497: libheif Heap Buffer Overflow in Image Scaling
A heap buffer overflow in libheif's image scaling code (all versions through v1.23.1) allows remote code execution when processing crafted AVIF files.…
CVE-2026-35603: Anthropic Claude Code Windows Folder Trust Vulnerability
A vulnerability in Anthropic Claude Code (and other AI tools) allows a low-privileged attacker to drop configuration files in a trusted Windows…
CVE-2026-25725: Claude Code Sandbox Escape
A sandbox escape vulnerability in Claude Code (CVSS 7.7) allows an attacker with code execution inside the sandbox to create a malicious…
CVE-2026-65105: NVIDIA NemoClaw Ollama Model Server Takeover
A vulnerability in NVIDIA NemoClaw (CVSS 8.1) allows an attacker to gain control of the local Ollama model server via a single…