CVE-2026-26268: Git-hook sandbox escape in Cursor
A Git-hook sandbox escape vulnerability in Cursor, reported by Novee under coordinated disclosure and fixed in Cursor 2.5 on February 13, 2026.
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2023-4863: Heap Buffer Overflow in WebP
CVE-2023-4863 is a heap buffer overflow vulnerability in the WebP image format library, which can be exploited for browser-based attacks. It was…
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Citrix has released security updates to address six vulnerabilities in NetScaler ADC and NetScaler Gateway, including flaws that could allow arbitrary file…
CVE-2026-8451: Actively Exploited Input Validation Flaw in NetScaler
CVE-2026-8451 is an insufficient input validation vulnerability in Citrix NetScaler ADC and NetScaler Gateway, with a CVSS score of 8.8. It was…
CVE-2026-8655: Citrix NetScaler ADC Multiple Memory Overflow DoS Vulnerabilities
Multiple memory overflow vulnerabilities in Citrix NetScaler ADC when configured as an LB of type Oracle, DNS Proxy, or DNS recursive resolver,…
CVE-2026-10816: Citrix NetScaler Unauthenticated Arbitrary File Read Vulnerability
An external control of file name vulnerability in Citrix NetScaler ADC and Gateway allowing unauthenticated arbitrary file read when management access is…
CVE-2026-10817: Citrix NetScaler TCP TimeStamp Memory Overread Vulnerability
An insufficient input validation vulnerability in Citrix NetScaler ADC and Gateway when TCP TimeStamp is enabled, leading to memory overread. CVSS score…
CVE-2026-13474: Citrix NetScaler HTTP/2 Denial-of-Service Vulnerability
A missing release of memory after effective lifetime vulnerability in Citrix NetScaler ADC and Gateway via malformed HTTP/2 requests, leading to denial-of-service.…
CVE-2026-3055: Citrix NetScaler Vulnerability
A known vulnerability in Citrix NetScaler used by the Chinese-speaking threat actor in manual operations.
CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing…