⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
F5 has issued out-of-band security updates to address critical vulnerabilities in NGINX, including CVE-2026-42530, a use-after-free flaw in the ngx_http_v3_module. This vulnerability allows remote, unauthenticated attackers to exploit NGINX’s HTTP/3 implementation, potentially causing worker-process restarts and denial of service.
A Technical Walkthrough of How Vidar Defeats Application-Bound Encryption
A Technical Walkthrough of How Vidar Defeats.
View CSAF Summary Successful exploitation of these vulnerabilities could allow an unauthenticated network-adjacent attacker to crash critical IEC 61850 services or execute arbitrary code, disrupting or compromising protection, visibility, and control functions. The following versions of MZ Automation libIEC61850 are affected: libIEC61850 >=v1.0.0|<=v1.6.1 CVSS Vendor Equipment Vulnerabilities v3 8.1 MZ Automation MZ Automation libIEC61850 Stack-based Buffer Overflow, Heap-based Buffer Overflow, Improper Handling of Syntactically Invalid Structure, NULL Pointer Dereference Background Critical Infrastructure Sectors: Critical Manufacturing, Energy, Transportation Systems Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE-2026-50039 The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a ReadRequest.
A Technical Walkthrough of How Vidar Defeats.
For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts.