A privilege escalation vulnerability in the OpenShift Cloud Credential Operator (CCO), tracked as CVE-2026-10843, provisions AWS IAM policies with account-wide scope for destructive actions rather … Read More
A path traversal vulnerability in OpenStack Ironic, the bare metal provisioning service, tracked as CVE-2026-48681, allows an attacker to overwrite arbitrary files during deployment by … Read More
A supply chain attack targeting the npm ecosystem has compromised dozens of packages across multiple maintainer accounts, using the binding.gyp package — a core build … Read More
An unauthenticated remote code execution vulnerability in Seagull Scientific BarTender, tracked as CVE-2026-25550, allows attackers to execute arbitrary commands on affected systems via the exposed … Read More
An improper authorization vulnerability in Microsoft Exchange Online, tracked as CVE-2026-48579, allows an unauthorised attacker to disclose information over a network. The vulnerability carries a … Read More
A maximum-severity authentication bypass vulnerability in Azure HorizonDB, tracked as CVE-2026-48567, allows an unauthenticated attacker to elevate privileges over a network. The vulnerability carries a … Read More
A critical vulnerability in Cisco SD-WAN Manager, tracked as CVE-2026-20245, allows attackers to execute arbitrary commands as root on affected instances. Cisco has confirmed active … Read More
A zero-day privilege escalation vulnerability in the Windows Cloud Filter driver (cldflt.sys), tracked as CVE-2026-33825 and dubbed “MiniPlasma,” allows any local user or application to … Read More
Vulnerability Intelligence Report — June 5, 2026 Coverage: June 4–5, 2026 | New items: 8 | CISA KEV deadlines today: 2 | CISA KEV deadlines … Read More
Two denial-of-service vulnerabilities have been disclosed in SolarWinds products, tracked as CVE-2026-28318 and CVE-2026-28299. Both allow unauthenticated attackers to crash services through specially crafted requests. … Read More
