Vulnerability Intelligence Report — June 4, 2026
Vulnerability Intelligence Report — June 4, 2026 Coverage: June 3–4, 2026 | New CISA KEV additions: 1 | New items: 5 | KEV deadlines today: … Read More
Genetec Security Center Credential Exposure (CVE-2026-40619): Local Attacker Can Access Server Admin Credentials
A high-severity vulnerability in Genetec Security Center, tracked as CVE-2026-40619, allows an attacker with local operating system privileges on the main server to access Server … Read More
OpenTelemetry eBPF Instrumentation Vulnerabilities (CVE-2026-45679 through CVE-2026-45686): Multiple Security Issues in Observability Framework
Eight vulnerabilities have been disclosed in OpenTelemetry eBPF Instrumentation, an open-source observability framework that provides eBPF-based instrumentation for the OpenTelemetry standard. The vulnerabilities span CVSS … Read More
NiceGUI Static Asset Information Disclosure (CVE-2026-45554): Uncaught Exception in FastAPI Routes
A vulnerability in NiceGUI, a Python-based UI framework, tracked as CVE-2026-45554, could allow attackers to trigger uncaught exceptions through two FastAPI routes that serve per-component … Read More
OpenMed Remote Code Execution (CVE-2026-47117): Malicious Hugging Face Models via PII Privacy Filter
A critical remote code execution vulnerability in OpenMed, tracked as CVE-2026-47117, allows attackers to achieve arbitrary code execution by manipulating the PII privacy-filter model loading … Read More
elixir-mint HTTP/2 Denial of Service (CVE-2026-48862): Uncontrolled Resource Consumption via Attacker-Controlled HTTP/2 Frames
A resource exhaustion vulnerability in the elixir-mint HTTP client library, tracked as CVE-2026-48862, allows remote attackers to cause denial of service by sending attacker-controlled HTTP/2 … Read More
Devolutions Server Improper Access Control (CVE-2026-9590): Authenticated Users Can Modify Assets Without Permission
An improper access control vulnerability in Devolutions Server, tracked as CVE-2026-9590, allows authenticated users with entry edit privileges to modify asset information without the required … Read More
ARMember Premium WordPress Plugin Vulnerabilities (CVE-2026-5076, CVE-2026-5073): SQL Injection and Plaintext Password Reset Key Exposure
Two vulnerabilities in the ARMember Premium WordPress membership plugin, tracked as CVE-2026-5076 and CVE-2026-5073, create a dangerous attack chain enabling full site compromise. CVE-2026-5076 (CVSS … Read More
Linux Kernel cgroups Privilege Escalation (CVE-2022-0492): Container Escape Risk, Added to CISA KEV
A privilege escalation vulnerability in the Linux kernel’s cgroups v1 subsystem, tracked as CVE-2022-0492, allows local attackers to break out of namespace isolation and escalate … Read More
Android Framework Zero-Day (CVE-2025-48595): Actively Exploited Privilege Escalation, Added to CISA KEV
Google has confirmed active exploitation of a zero-day vulnerability in the Android Framework, tracked as CVE-2025-48595, that allows local privilege escalation on Android 14 and … Read More