Aggregator

A vulnerability was found in ImageMagick up to 7.1.2-25. It has been declared as critical. The impacted element is an unknown function of the component FormatMagickCaption. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2026-61861. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Escalating threats are forcing boards to prioritize security, but communication gaps persist. Boards and security teams each say they need more support to bridge the divide.

A vulnerability, which was classified as critical, has been found in PTC Windchill PDMLink and FlexPLM up to 13.1.3.0. This affects an unknown part. This manipulation causes improper input validation. This vulnerability is handled as CVE-2026-12569. The attack can be initiated remotely. Additionally, an exploit exists. It is advisable to upgrade the affected component.

A vulnerability has been found in CERTCC VINCE up to 1.50.3 and classified as critical. Affected by this issue is some unknown functionality. This manipulation of the argument Product Affected causes injection. The identification of this vulnerability is CVE-2022-40248. The attack needs to be done within the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in CERTCC VINCE up to 1.50.3 and classified as critical. This affects an unknown part of the component Email Handler. Such manipulation of the argument Subject leads to injection. This vulnerability is referenced as CVE-2022-40257. The attack needs to be initiated within the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in IBM InfoSphere Information Server 11.7. It has been classified as problematic. This impacts an unknown function of the component Job Handler. The manipulation leads to denial of service. This vulnerability is listed as CVE-2022-40235. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

Currently trending CVE - Hype Score: 1 - ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform. ServiceNow addressed this ...

Currently trending CVE - Hype Score: 1 - WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

Currently trending CVE - Hype Score: 1 - WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.

A vulnerability categorized as critical has been discovered in spice-vdagent. Affected by this issue is some unknown functionality. Such manipulation leads to path traversal. This vulnerability is documented as CVE-2026-57966. The attack needs to be performed locally. There is not any exploit available.

A vulnerability, which was classified as problematic, has been found in ImageMagick up to 7.1.2-25/up to 6.9.13-50. This impacts an unknown function of the component MIFF Encoder. The manipulation leads to memory leak. This vulnerability is traded as CVE-2026-61869. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability described as problematic has been identified in ImageMagick up to 7.1.2-25/6.9.13-50. Affected by this vulnerability is an unknown functionality of the component YUV Decoder. Executing a manipulation can lead to memory leak. This vulnerability appears as CVE-2026-61868. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in ImageMagick. Affected by this issue is some unknown functionality of the component VIFF Encoder. Performing a manipulation results in memory leak. This vulnerability is cataloged as CVE-2026-61870. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in ImageMagick. This vulnerability affects unknown code of the component Hough Lines Operation. This manipulation causes memory leak. This vulnerability is handled as CVE-2026-61865. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

The administration set a target date of September for CISA to finalize the rule, but where the agency is headed remains a mystery to some.

The post Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks appeared first on CyberScoop.

EU fined Google €890M under the DMA for favoring its own services and restricting Play Store competition, with AI search features also under scrutiny. The European Commission hit Google with two fines totalling €890 million on Thursday for violating the Digital Markets Act, one for giving its own services preferential placement in Google Search and […]

A vulnerability was found in Oracle WebLogic Server 14.1.2.0.0/15.1.1.0.0 and classified as problematic. Impacted is an unknown function of the component Console. Such manipulation leads to privilege escalation. This vulnerability is listed as CVE-2026-60529. The attack may be performed from remote. There is no available exploit.

A vulnerability, which was classified as critical, has been found in Oracle Cost Management up to 12.2.15. The affected element is an unknown function of the component Internal Operations. This manipulation causes improper authorization. The identification of this vulnerability is CVE-2026-60741. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in Oracle Cost Management up to 12.2.15 and classified as critical. This affects an unknown function of the component Internal Operations. Performing a manipulation results in privilege escalation. This vulnerability is identified as CVE-2026-60744. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in Oracle Pasta up to 12.2.15. It has been classified as very critical. Affected by this vulnerability is an unknown functionality of the component Internal Operations. This manipulation causes improper privilege management. The identification of this vulnerability is CVE-2026-60775. The attack can only be executed locally. There is no exploit available.