F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 has released security updates to address two critical vulnerabilities in NGINX Open Source that could allow remote code execution. The flaws,…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-42530 — Vulnerability brief
CVE-2026-42530 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-42055: Heap Buffer Overflow in NGINX HTTP/2 Proxy and gRPC Modules
A critical heap-based buffer overflow in NGINX Open Source and NGINX Plus allows remote unauthenticated attackers to execute code when proxying HTTP/2…
CVE-2026-56786 — Critical vulnerability brief
CVSS 9.3RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length counters to destination buffer size, allowing…
CVE-2026-50548 — Critical vulnerability brief
CVSS 9.3Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by…
CVE-2026-50549: Cursor Symlink Vulnerability
CVSS 9.3A vulnerability in Cursor v3.0 and earlier allows malicious repositories to use symlinks to write to sensitive files outside the project directory,…
Apple Patches Beats Studio Buds Flaw Allowing Nearby Attackers to Spy via Microphone
Apple has released a firmware update for Beats Studio Buds wireless earbuds to address a high-severity vulnerability, CVE-2025-20701 (CVSS 8.8), that could…
CVE-2025-20701 — Vulnerability brief
CVE-2025-20701 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2025-20700: Airoha SoC Bluetooth Vulnerability
One of three flaws in Airoha SoCs disclosed at TROOPERS, allowing attackers to take over headphones via Bluetooth without authentication.
CVE-2025-20702: Airoha SoC Bluetooth Vulnerability
Another flaw in Airoha SoCs enabling Bluetooth takeover without authentication, part of the same disclosure as CVE-2025-20700 and CVE-2025-20701.