CVE-2025-33073 — Vulnerability brief
CVE-2025-33073 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm Ravie LakshmananJun 11, 2026Cybercrime / Ransomware A new analysis of The…
CVE-2024-55591 — Vulnerability brief
CVE-2024-55591 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass exploit named GreatXML, discovered accidentally while researching…
CVE-2026-45585 — Vulnerability brief
CVE-2026-45585 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
LangGraph Flaw Chain Enables Remote Code Execution on Self-Hosted AI Agents
Cybersecurity researchers at Check Point have disclosed three now-patched security flaws in LangGraph, an open-source framework by LangChain for building stateful, multi-agent…
CVE-2025-67644: SQL Injection in LangGraph SQLite Checkpoint
A SQL injection vulnerability in LangGraph's SQLite checkpoint implementation allows attackers to manipulate SQL queries through metadata filter keys, potentially leading to…
CVE-2026-28277: Unsafe Deserialization in LangGraph
An unsafe msgpack deserialization vulnerability in LangGraph that can be exploited to trigger object reconstruction when a checkpoint is loaded by an…
CVE-2026-27022: RediSearch Query Injection in LangGraph Redis Checkpoint
A RediSearch Query Injection vulnerability in @langchain/langgraph-checkpoint-redis that can be used to bypass access controls in self-hosted LangGraph deployments.
Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
Cybersecurity researchers at Tenet Security have identified a new class of attack called Agentjacking, which tricks AI coding agents into executing arbitrary…