CVE-2025-68613: Critical n8n Expression Injection Vulnerability
CVE-2025-68613 is an expression injection vulnerability in n8n with a CVSS score of 9.9. It was added to CISA's Known Exploited Vulnerabilities…
Tag: critical
CVE-2026-40139 — Critical vulnerability brief
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated…
CVE-2026-12481 — Critical vulnerability brief
A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer. Specifically,…
CVE-2026-41106 — Critical vulnerability brief
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-55115 — Critical vulnerability brief
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application…
CVE-2026-55116 — Critical vulnerability brief
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in…
CVE-2025-11371: Gladinet Triofox Critical Vulnerability
A critical flaw (CVSS 9.1) in Gladinet Triofox exploited by Storm-2603 for initial access in ransomware attacks. Used to probe for local…
CVE-2026-58453 — Critical vulnerability brief
JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by…
CVE-2026-34106 — Critical vulnerability brief
Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec("php jobs/subtitle_rendering.php ".$login_session."…
CVE-2026-34100 — Critical vulnerability brief
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type,…