Root Access Without Password on Toptech Industrial Devices: Bug Fixed with an Update
CVE-2026-12562 allows unauthenticated root access on Toptech RCU II+ and Multiload II+ controllers. A firmware update and removal tool resolve the flaw.
Vulnerabilities
More news
Page 32 / 34 · 305 articles
igloohome Smart Lock: Vulnerability in Android App Could Expose Locks to Intrusions
A flaw in the igloohome Android app (CVE-2026-16581) exposes sensitive credentials and could allow attackers to unlock smart locks globally.
Alert for SCADA systems: a vulnerability in Schneider Electric IGSS allows code execution via CGF files
A high-severity flaw in Schneider Electric IGSS SCADA allows code execution via CGF files. Update immediately to secure your critical infrastructure.
FCC Bans Foreign Mobile Robots and Power Inverters: Third Supply Chain Ban Takes Effect
The FCC expanded its Covered List to ban new foreign mobile robots and connected power inverters due to national security risks and severe vulnerabilities.
Anthropic’s Mythos Finds SharePoint Bugs Faster Than Microsoft Can Fix Them: The Five Eyes Alert
Anthropic's Mythos AI finds SharePoint vulnerabilities faster than Microsoft can patch them, prompting a Five Eyes intelligence alert.
Check Point Alert: Critical Authentication Bypass in SmartConsole Exploited in the Wild, PoC Released
CVE-2026-16232 allows remote attackers to bypass auth in Check Point SmartConsole and get admin roles. Apply Jumbo Hotfixes now.
Cisco FMC Under Attack: Urgent Hotfixes for Two Vulnerabilities, One Actively Exploited Zero-Day
Cisco released urgent hotfixes for two FMC vulnerabilities, including an actively exploited zero-day. Discover the risks, IoCs, and how to apply fixes.
VMware patches critical flaws: VM escape and risk of total control of the virtual infrastructure
Broadcom patched critical VMware flaws in ESXi and vCenter. Updates fix severe VM escape and RCE flaws risking total virtual infrastructure control.
Gitea: Critical Vulnerability CVE-2026-60004 Detected, Immediate Update to Version 1.27.1
Critical Gitea vulnerability CVE-2026-60004 allows remote code execution. Update self-hosted instances to version 1.27.1 immediately to secure your server.