Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

141 New today
59,310 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

202
May 22
67
May 23
111
May 24
204
May 25
336
May 26
455
May 27
326
May 28
451
May 29
206
May 30
84
May 31
417
Jun 1
295
Jun 2
151
Jun 3
26
Jun 4
Critical
High
Medium
Low

Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 4.9 CVE-2026-50219

CVE-2026-50219_CVE-2026-50219

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset ...

libexpat project libexpat CVE
HIGH 8.5 CVE-2026-49189

Broadcast Receiver Privilege Escalation_CVE-2026-49189

Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations.

Acer Connect M6E 5G Portable WiFi Router * CVE
HIGH 8.7 CVE-2026-49188

Elevated Root Command Execution via ai_cmd Sockets_CVE-2026-49188

The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to exe...

Acer Connect M6E 5G Portable WiFi Router * CVE
HIGH 8.7 CVE-2026-49187

Hard-coded APK Resource Credentials & Scepters_CVE-2026-49187

The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse.

Acer Connect M6E 5G Portable WiFi Router * CVE
MEDIUM 6.7 CVE-2026-10805

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend_CVE-2026-10805

A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malfo...

Red Hat Multicluster Engine for Kubernetes CVE
HIGH 8.5 CVE-2026-50206

VPN Command Injection Vulnerability_CVE-2026-50206

Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files.

Acer Connect M6E 5G Portable WiFi Router * CVE
HIGH 8.8 CVE-2026-50205

Plaintext Log Credential Leakage_CVE-2026-50205

System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data.

Acer Connect M6E 5G Portable WiFi Router * CVE
MEDIUM 6.9 CVE-2026-49204

Hard-coded AWS Cognito Testing Accounts_CVE-2026-49204

Leftover debug modules contain fixed credentials for internal AWS Cognito test sandboxes, risking asset exploitation.

Acer Connect M6E 5G Portable WiFi Router * CVE
HIGH 7.2 CVE-2026-49203

Unauthenticated eSIM Configuration Manipulation_CVE-2026-49203

Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or del...

Acer Connect M6E 5G Portable WiFi Router * CVE