Critical Cursor Flaws Enable Zero-Click Sandbox Escape via Prompt Injection
Two critical vulnerabilities in Cursor, an AI-powered code editor, allow prompt injection attacks to escape the editor's safety sandbox and execute arbitrary…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2025-54135: CurXecute – Cursor Prompt Injection via Slack Message
CVE-2025-54135, known as CurXecute, is a vulnerability in Cursor discovered by Aim Security. A planted Slack message rewrites Cursor's ~/.cursor/mcp.json config and…
CVE-2026-26268: Git-hook sandbox escape in Cursor
A Git-hook sandbox escape vulnerability in Cursor, reported by Novee under coordinated disclosure and fixed in Cursor 2.5 on February 13, 2026.
CVE-2023-4863: Heap Buffer Overflow in WebP
CVE-2023-4863 is a heap buffer overflow vulnerability in the WebP image format library, which can be exploited for browser-based attacks. It was…
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Citrix has released security updates to address six vulnerabilities in NetScaler ADC and NetScaler Gateway, including flaws that could allow arbitrary file…
CVE-2026-8451: Citrix NetScaler SAML IDP Memory Overread Vulnerability
An insufficient input validation vulnerability in Citrix NetScaler ADC and Gateway when configured as a SAML IDP, leading to memory overread. CVSS…
CVE-2026-8452: Citrix NetScaler Gateway Memory Overflow DoS Vulnerability
A memory overflow vulnerability in Citrix NetScaler ADC and Gateway when configured as a Gateway or AAA virtual server, leading to denial-of-service.…
CVE-2026-8655: Citrix NetScaler ADC Multiple Memory Overflow DoS Vulnerabilities
Multiple memory overflow vulnerabilities in Citrix NetScaler ADC when configured as an LB of type Oracle, DNS Proxy, or DNS recursive resolver,…
CVE-2026-10816: Citrix NetScaler Unauthenticated Arbitrary File Read Vulnerability
An external control of file name vulnerability in Citrix NetScaler ADC and Gateway allowing unauthenticated arbitrary file read when management access is…
CVE-2026-10817: Citrix NetScaler TCP TimeStamp Memory Overread Vulnerability
An insufficient input validation vulnerability in Citrix NetScaler ADC and Gateway when TCP TimeStamp is enabled, leading to memory overread. CVSS score…