⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers.
Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how can we determine which paths an autonomous system can discover, given the access it already has?
Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on September 22. The flaw, tracked as CVE-2026-93952 , may allow a remote attacker with no login access to privilege internal functions and affect the VCO host.
This advisory covers the 'Copy Fail' vulnerability affecting numerous Siemens SIPLUS and SIMATIC products. Siemens has released fixes for some products and is preparing further updates, recommending countermeasures for those without patches.
This advisory from CISA describes a critical double free vulnerability (CVE-2026-91018) in the lwIP lightweight TCP/IP stack, affecting versions 2.0.1 through 2.2.1. Successful exploitation could result in system crashes, denial of service, memory corruption, or code execution, posing significant risks to critical infrastructure sectors globally.
This advisory identifies a critical vulnerability in Siemens Siveillance Control's Open Interface Services web module that allows arbitrary file uploads, potentially granting an attacker root access. The vulnerability affects multiple versions of Siveillance Control and Siveillance Control Pro.