CVE-2026-12481 — Critical vulnerability brief
A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer. Specifically,…
Tag: Critical CVE
CVE-2026-41106 — Critical vulnerability brief
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-55115 — Critical vulnerability brief
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application…
CVE-2026-55116 — Critical vulnerability brief
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in…
CVE-2026-58453 — Critical vulnerability brief
JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by…
CVE-2026-34106 — Critical vulnerability brief
Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec("php jobs/subtitle_rendering.php ".$login_session."…
CVE-2026-34100 — Critical vulnerability brief
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type,…
CVE-2026-14120 — Critical vulnerability brief
Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
CVE-2026-14101 — Critical vulnerability brief
Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer…
CVE-2026-14104 — Critical vulnerability brief
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside…