V platformi MLflow je bila odkrita kritična ranljivost CVE-2026-116692, ki napadalcu omogoča oddaljeno izvajanje kode prek deserializacije scorerjev tretjih strani. Ranljivost je ocenjena z najvišjo oceno CVSS 9.8 in je odpravljena v različici 3.17.0.
28.10.2026, 08:20V platformi MLflow je bila odkrita kritična ranljivost CVE-2026-116692, ki napadalcu omogoča oddaljeno izvajanje kode prek deserializacije scorerjev tretjih strani. Ranljivost je ocenjena z najvišjo oceno CVSS 9.8 in je odpravljena v različici 3.17.0.
Apple je varnostne popravke za ranljivost CoreGraphics, izdane za novejše naprave, prenesel tudi na starejše modele iPhone in iPad. Ranljivost CVE-2026-86950 je v katalogu CISA KEV, kar pomeni potrjeno aktivno izkoriščanje.
Varnostni raziskovalci so onesposobili zapuščen posodobitveni mehanizem v aplikaciji Time4Popcorn, ki je po njihovih ocenah ogrožal milijone računalnikov. Ranljivost CVE-2026-30612 je ocenjena kot kritična, saj je omogočala oddaljeno izvajanje kode.
The Apache Host Header Stored XSS Vulnerability, identified as CVE-2024-11986, is a recently uncovered security flaw impacting Apache HTTP Server versions 2.4.51 and 2.4.52. This vulnerability...
In recent weeks, a critical vulnerability known as CVE-2024-22461 has emerged within Dell’s RecoverPoint for Virtual Machines. This command injection vulnerability could allow attackers to execute...
Iran-Linked IOCONTROL Malware Threatening IoT and OT Environments Iran-affiliated threat actors are now associated with new custom malware called IOCONTROL. This malware specifically targets IoT and...
The ComfyUI-Ace Code Injection Vulnerability, known as CVE-2024-21577, poses a serious threat to users relying on the platform. Discovered on December 13, 2024, this vulnerability exists...
A critical vulnerability known as CVE-2024-9290 has emerged in the Super Backup & Clone – Migrate for WordPress plugin. This vulnerability allows unauthenticated users to upload...
The recent discovery of a vulnerability in the MainWP Child WordPress plugin, identified as CVE-2024-10783, has raised significant concerns in the WordPress community. This security flaw...
Understanding PUMAKIT: A New Linux Rootkit Recent findings by cybersecurity researchers reveal a new Linux rootkit called PUMAKIT. This rootkit is particularly dangerous because it can...
The U.S. Department of Justice (DoJ) has made headlines with a significant crackdown on cybercrime. On Thursday, they announced the closure of an illicit marketplace named...
Vodnilna profesionalna mrežna platforma se sooča z novo večjo kršitvijo varnosti podatkov, kar ponovno izpostavlja pomen kibernetske varnosti. Po poročilih, ki krožijo na temnem spletu, so...
Gamaredon Unveils New Android Spyware: BoneSpy and PlainGnome The Russia-linked state-sponsored threat actor known as Gamaredon has progressed in its techniques. This time, the group has...
Cybersecurity Risks in Prometheus Monitoring Toolkit Cybersecurity researchers have issued warnings regarding a significant threat facing thousands of servers that host the Prometheus monitoring and alerting...
SaaS Services and Their Impact on Operating Expenses for Modern Businesses SaaS (Software as a Service) services are one of the biggest drivers of operating expenses...
