Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 4.2 MS:CVE-2026-12457

Chromium: CVE-2026-12457 Insufficient data validation in Extensions_MS:CVE-2026-12457

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
NONE HACKREAD:2D46D1...

Texas Parks and Wildlife Data Breach Affects Over 3M License Customers_HACKREAD:2D46D1960411F315B542E2C1692F2FA3

Around 3 million Texas licence holders face a data breach after hackers targeted a third-party vendor, exposing driver's licences and passport numb...

N/A N/A HACKREAD
NONE HACKREAD:9F698B...

Threat Hunting Beyond Alerts: Finding the Activity Detection Misses_HACKREAD:9F698B13891B8B4AAE2A847386D6BF28

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

N/A N/A HACKREAD
NONE MALWAREBYTES:A0...

Thousands of D-Link routers under control of AryStinger botnet_MALWAREBYTES:A0D999B5D88190CE5F2B8E2C477AAC4E

Researchers have found that the recently discovered AryStinger botnet has quietly hijacked thousands of end‑of‑life D‑Link routers and some network...

N/A N/A MALWAREBYTES
CRITICAL 9.4 THN:A2D26AE6302...

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants_THN:A2D26AE6302BAA068AA98AC6FA38A101

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrjCumekV1hjkgdgebp4RqfYc_Yt9Swv4lG7ds3XMDHG9f-JxSuJSWY3UcWIoivJoJkJjdlBvtiQAHKy7NNg...

N/A N/A THN
CRITICAL 9.8 6187732A-19DB-

Exploit for CVE-2026-54806_6187732A-19DB-57D3-B916-91087E253791

WP Activity Log PHP Object Injection CVE-2026-54806 PoC 📜 Description CVE-2026-54806 is a critical CVSS 9.8 unauthenticated PHP Object Injection v...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.1 CVE-2026-9265

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path_CVE-2026-9265

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_attribute() copies a UTF8ST...

JONASBN Crypt::OpenSSL::PKCS12 CVE
CRITICAL 9.1 CVE-2026-11373

Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections_CVE-2026-11373

Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. Net::Statsite::Client is a client for the statsite protocol, which ...

JASEI Net::Statsite::Client CVE
LOW 2.3 CVE-2026-9610

Multiple Vulnerabilities in IBM Datacap_CVE-2026-9610

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the U...

IBM Datacap 9.1.7 CVE
MEDIUM 5.9 CVE-2026-9320

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities_CVE-2026-9320

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial o...

IBM WebSphere Application Server 9.0.0 CVE