CVE-2026-6686: FatFs File Extended Past End Leaks Deleted Data
A file extended past its end in FatFs can leak leftover data from deleted files. CVSS 4.6 (Medium).
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-6684: FatFs Malformed GPT Partition Table Hang
A malformed GPT partition table can hang the device during mount. Fixed in FatFs R0.16. CVSS 4.6 (Medium).
CVE-2026-12481 — Critical vulnerability brief
CVSS 9.8A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer. Specifically,…
Bad Epoll: Linux Kernel Privilege Escalation Vulnerability
CVE-2026-46242, named Bad Epoll, is a Linux kernel privilege escalation vulnerability similar to GhostLock. It allows an unprivileged user to gain root…
CVE-2026-43074: Related Linux Kernel Epoll Flaw Found by Anthropic’s Mythos AI
A sibling vulnerability to Bad Epoll in the same epoll code area, discovered by Anthropic's Mythos AI model. Fixed earlier in 2026.…
CVE-2026-31694 — Vulnerability brief
CVE-2026-31694 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
New Bad Epoll Linux Kernel Flaw (CVE-2026-46242) Enables Root Privilege Escalation on Android and Linux Systems
A newly disclosed Linux kernel vulnerability, dubbed "Bad Epoll" and tracked as CVE-2026-46242, allows unprivileged local users to gain full root access…
CVE-2025-9491: Windows Shortcut Vulnerability Exploited by Armored Likho
CVE-2025-9491 is a now-patched Windows shortcut vulnerability (ZDI-CAN-25373) that allows remote code execution. Addressed by Microsoft in November 2025 Patch Tuesday, it…
CVE-2026-41106 — Critical vulnerability brief
CVSS 9.3Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials Ravie LakshmananJul 02, 2026Malware / Cyber Attack Threat actors associated…