GitLab Fixes AI Gateway Sandbox Escape Enabling Command Execution
GitLab fixed a critical AI Gateway sandbox escape that could let authenticated users execute commands. Self-hosted gateways should upgrade to patched releases.
Vulnerabilities
More news
Page 2 / 33 · 295 articles
Six Dell CSM Flaws Expose Storage Credentials, Tenant Controls, and Kubernetes Nodes
Dell patched six critical CSM flaws, including two CVSS 10.0 bugs enabling credential theft, token forgery, tenant takeover and Kubernetes root access.
Four Monta Platform Flaws Put Charging-Station Access and Availability at Risk
CISA warns four Monta monta.app flaws (CVSS 9.4) allow station impersonation, credential exposure, DoS and unauthorized charging control.
Meari OpenAPI Authorization Gaps Expose Device Controls and Sensitive Data
CISA disclosed two Meari OpenAPI authorization flaws enabling authenticated users to alter device configs and access shadows, with no fix planned.
Armatura One Security Failures Put Access-Control Hosts, Databases, and Credentials at Risk
CISA reports five Armatura One flaws, including unauthenticated ActiveMQ RCE and hardcoded credentials exposing databases, hosts and access control.
FortiMail Zero-Day Gives Unauthenticated Attackers a Route to System File Writes
FortiMail zero-day CVE-2026-104286 (CVSS 9.8) enables unauthenticated file writes. Affected versions, fixes, workarounds and IOCs.
Three Execution Paths Expose Trust Failures in Zammad, MagicINFO, and Unsloth Studio
Zammad session hijack led to root at DIVD, MagicINFO flaw enabled AnyDesk and cryptomining, and Unsloth executed code on model selection.
Two ABB PCM600 Weaknesses Put Windows Privileges and Project Files at Risk
CISA disclosed two ABB PCM600 flaws enabling Windows privilege escalation and path traversal in project imports. Learn affected versions and mitigations.
Public CoreGraphics PoC Raises Pressure to Patch Apple Devices Under Targeted Attack
Public PoC for CVE-2026-86950 confirms CoreGraphics font crash, raising pressure to patch iOS 26.7.1 and macOS amid targeted attacks.