CVE-2026-65884 — Critical vulnerability brief
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated…
Tag: critical
CVE-2026-65883 — Critical vulnerability brief
Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd…
CVE-2026-58179 — Critical vulnerability brief
The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affects Apache Traffic Server: from 8.0.0…
CVE-2026-14958 — Critical vulnerability brief
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.
CVE-2026-14959 — Critical vulnerability brief
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.
CVE-2026-14973 — Critical vulnerability brief
IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected…
CVE-2026-14446 — Critical vulnerability brief
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console.
CVE-2026-14512 — Critical vulnerability brief
IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass…
CVE-2026-27577: Critical n8n Sandbox Escape
A critical sandbox escape vulnerability in n8n that allowed authenticated workflow editors to execute OS commands. Fixed in February 2026 with a…
CVE-2026-55971 — Critical vulnerability brief
Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to…