Orthanc DICOM Server Flaw Allows Authenticated Attackers to Corrupt Heap Memory
CVE-2026-87020 lets authenticated attackers crash Orthanc DICOM Server <1.13.0 via malicious PNG causing heap overflow. Learn impact and fixes.
Vulnerabilities
More news
Page 17 / 39 · 348 articles
CISA Expands iDirect Satellite Terminal Warning With Critical Privilege-Escalation Flaw
CISA expanded its iDirect advisory with two new flaws exposing credential hashes and enabling critical local privilege escalation on satellite terminals.
Four AVEVA Pipeline Integrity Monitor Flaws Expose Project Data and User Sessions
CISA warns of four AVEVA Pipeline Integrity Monitor flaws enabling data theft, credential recovery and XSS. Update to 2025 SP1 P2 and reset passwords.
GitLab Path Traversal Flaw Enters CISA KEV With Three-Day Patch Deadline
GitLab CVE-2026-85706 allows unauthenticated file access via API. CISA added it to KEV with Sept 14 deadline. Learn affected versions and fixes.
Critical GitLab File-Read Flaw Exploited Within a Day of Patch Disclosure
Unauthenticated GitLab flaw CVE-2026-85706 (CVSS 10) exploited within a day. Learn affected versions, detection logs and patch deadline.
UK Council Cyberattack Tied to Mass Exploitation of Critical SonicWall Flaw
UK council cyberattack linked to mass exploitation of CVE-2026-15409 in SonicWall SMA1000, enabling credential theft and Active Directory compromise.
Attackers Chain JFrog Artifactory Flaws to Deploy Rust Backdoor
Attackers chain JFrog Artifactory flaws CVE-2026-42018 and CVE-2026-42016 to gain admin access, install Groovy plugins and Rust backdoor. Patch now.
Three High-Severity Flaws Expose NextGen Mirth Connect Data and Credentials
CISA discloses three high-severity Mirth Connect flaws through 4.7.1, with SQL injection and XXE risking data theft and credential exposure.
ShieldCrash PoC Claims to Bypass Microsoft’s Fix for Defender Privilege Flaw
ShieldCrash PoC claims bypass of Microsoft's fix for CVE-2026-69414, enabling SYSTEM-level file reads on patched Windows via Defender.