Nine Flaws Leave Anjvision Video Devices Exposed Without a Planned Firmware Fix
CISA disclosed nine flaws in Anjvision YSSD-RTMP-H5 firmware, including unauthenticated access and RCE, with CVSS 9.8 and no fix planned.
Vulnerabilities
More news
Page 5 / 34 · 305 articles
VIVOTEK Camera Flaw Exposes Dozens of Models to Unauthenticated Command Execution
CISA warns CVE-2026-22755 in VIVOTEK upload_map.cgi allows unauthenticated remote command execution with root privileges across dozens of camera models.
Viidure Dashcam App Flaws Leave Cloud Footage and Firmware Exposed
CISA reports Viidure cloud-storage flaws exposing dashcam footage and firmware. Its advisory lists no planned fix.
Branch Target Reuse Turns Discarded JIT Code Into a Spectre Data-Leak Primitive
Researchers disclose Branch Target Reuse, a Spectre v2 flaw using stale JIT predictions to leak Linux memory, including root hash via cBPF.
Radio-Range Flaw Can Disrupt Baicells Nova 430H Cellular Service
CVE-2026-96274 lets attackers in radio range disrupt Baicells Nova 430H service via malformed NAS messages. No patch planned; mitigation guidance inside.
Kiteworks Reopens Customer Systems After Emergency Fix for Critical, Undisclosed Flaw
Kiteworks restored hosted systems after fixing a critical undisclosed flaw, lifting its global shutdown with no evidence of exploitation.
Bitget Says Stolen Credentials Turned a Security Tool Flaw Into a $388 Million Wallet Breach
Bitget says attacker exploited zero-day in security tool, stole credentials and drained $388M from hot wallets via legit approvals; cold wallets safe.
Apple Closes CoreGraphics Memory Flaw Linked to Precision iPhone Attacks
Apple patched CVE-2026-86950, a CoreGraphics out-of-bounds flaw enabling code execution in targeted iPhone attacks. Update iOS 26.7.1 and macOS now.
CISA’s 2026 Election Plan Targets the Gaps Between IT Networks and Voting Systems
CISA's 2026 election plan secures voter databases, IT networks, patching and insider risks across 10,000+ US jurisdictions.