Security Advisories

150 advisories
CRITICAL CVSS 10.0 CVE-2026-57811 2026-08-12

Critical Code Injection Vulnerability in Realtyna Organic IDX Plugin (CVE-2026-57811)

A critical code injection vulnerability in Realtyna Organic IDX plugin for WordPress allows remote code inclusion. CVSS 10.0. Affects versions through 5.2.0. Immediate patching required to mitigate exploitation risks.

Read full advisory →
CRITICAL CVSS 10.0 CVE-2026-50086 2026-08-12

Critical AES Authentication Flaw in Aqara IAM/SSO Gateway (CVE-2026-50086)

A critical vulnerability in an IoT platform's authentication gateway allows unauthenticated AES cryptographic operations, exposing signing keys. CVSS 10.0. Immediate patching required to prevent potential data compromise.

Read full advisory →
CRITICAL CVSS 10.0 CVE-2026-56004 2026-08-12

Critical Shellcode Injection Vulnerability in openSUSE Build Service (CVE-2026-56004)

A critical code execution vulnerability in the Mercurial handler of openSUSE Build Service's tar_scm source service allows attackers to inject shellcode via malicious _service files, affecting systems using versions prior to 0.12.4.

Read full advisory →
CRITICAL CVSS 10.0 CVE-2026-47140 2026-08-12

Critical Code Execution Vulnerability in vm2 Library (CVE-2026-47140)

A critical vulnerability in the vm2 Node.js sandboxing library allows escaped code execution via unblocked process and inspector/promises primitives. Affected versions prior to 3.11.4. Upgrade immediately.

Read full advisory →
CRITICAL CVSS 10.0 CVE-2026-48772 2026-08-12

Critical Vulnerability in ProxySQL Allows Remote IP Spoofing (CVE-2026-48772)

ProxySQL versions 2.0.0-3.0.8 mishandle PROXY protocol v1 headers, enabling attackers to spoof client IP addresses. CVSS 10.0. Immediate patching required.

Read full advisory →
CRITICAL CVSS 10.0 CVE-2026-13768 2026-08-12

Critical Privileged Key Exposure in Gardyn Devices (CVE-2026-13768)

CVE-2026-13768 exposes a privileged iothubowner key in Gardyn devices, enabling unauthorized access to device connections and command execution. Immediate mitigation is required to prevent network compromise.

Read full advisory →
← Newer Page 13 of 13