Critical GitLab GraphQL Flaw CVE-2026-19478 Allows Unauthenticated Project Deletion
GitLab has released emergency security updates to address a critical vulnerability in its Community Edition (CE) and Enterprise Edition (EE) that could…
Tag: critical vulnerability
Adobe Bridge: Multiple Critical Vulnerabilities Fixed
Adobe Bridge received updates to address eight critical vulnerabilities, including untrusted search paths, incorrect authorization, path traversal, and out-of-bounds writes, all leading…
CVE-2026-59726: Critical Ruflo MCP Flaw Allows Unauthenticated RCE and AI Memory Poisoning
CVE-2026-59726 is a maximum-severity vulnerability (CVSS 10.0) in Ruflo, an open-source AI multi-agent orchestration platform. It allows unauthenticated attackers to achieve remote…
CVE-2024-42009: Critical Roundcube Cross-Site Scripting Vulnerability
CVE-2024-42009 is a critical cross-site scripting (XSS) vulnerability in Roundcube webmail with a CVSS score of 9.3. Exploitation requires the victim to…
Adobe Campaign Classic: Critical Vulnerabilities Patched
Adobe Campaign Classic, an enterprise marketing automation platform, received updates to fix critical vulnerabilities including CVE-2026-48449 (CVSS 10.0) and CVE-2026-48448 (SQL injection).
CVE-2024-1212: Progress Kemp LoadMaster Critical RCE
A critical OS command injection vulnerability in Progress Kemp LoadMaster, with a CVSS score of 10.0, allows unauthenticated attackers to execute arbitrary…