CVE-2026-13221 — Critical vulnerability brief
Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled…
Tag: Critical CVE
CVE-2026-57827 — Critical vulnerability brief
Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an…
CVE-2026-54527 — Critical vulnerability brief
JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML…
CVE-2026-9074 — Critical vulnerability brief
IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.
CVE-2026-58480 — Critical vulnerability brief
Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files…
CVE-2026-40139 — Critical vulnerability brief
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated…
CVE-2026-12481 — Critical vulnerability brief
A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer. Specifically,…
CVE-2026-41106 — Critical vulnerability brief
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-55115 — Critical vulnerability brief
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application…
CVE-2026-55116 — Critical vulnerability brief
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in…