V platformi MLflow je bila odkrita kritična ranljivost CVE-2026-116692, ki napadalcu omogoča oddaljeno izvajanje kode prek deserializacije scorerjev tretjih strani. Ranljivost je ocenjena z najvišjo oceno CVSS 9.8 in je odpravljena v različici 3.17.0.
28.10.2026, 08:20V platformi MLflow je bila odkrita kritična ranljivost CVE-2026-116692, ki napadalcu omogoča oddaljeno izvajanje kode prek deserializacije scorerjev tretjih strani. Ranljivost je ocenjena z najvišjo oceno CVSS 9.8 in je odpravljena v različici 3.17.0.
Apple je varnostne popravke za ranljivost CoreGraphics, izdane za novejše naprave, prenesel tudi na starejše modele iPhone in iPad. Ranljivost CVE-2026-86950 je v katalogu CISA KEV, kar pomeni potrjeno aktivno izkoriščanje.
Varnostni raziskovalci so onesposobili zapuščen posodobitveni mehanizem v aplikaciji Time4Popcorn, ki je po njihovih ocenah ogrožal milijone računalnikov. Ranljivost CVE-2026-30612 je ocenjena kot kritična, saj je omogočala oddaljeno izvajanje kode.
A critical vulnerability, known as CVE-2025-24968, has recently emerged in the reNgine Project. This vulnerability allows remote command execution, posing a severe threat to users relying...
The CVE-2025-0364 vulnerability presents a significant cybersecurity risk, targeting BigAntSoft’s BigAnt Server. This critical flaw allows unauthenticated remote code execution, meaning attackers can run commands on...
The Aruba ClearPass Policy Manager Privilege Escalation Vulnerability, identified as CVE-2025-23058, has recently come to light. This critical vulnerability allows unauthorized individuals to escalate their privileges...
CVE-2024-12859, known as the “BoomBox Theme Extensions WordPress Local File Inclusion Vulnerability,” poses serious risks for website owners using the BoomBox Theme Extensions plugin for WordPress....
CVE-2025-24661 is a high-severity vulnerability affecting the MagePeople Team Taxi Booking Manager for WooCommerce. Identified on February 3, 2025, this vulnerability involves deserialization of untrusted data,...
Recently, a critical vulnerability known as CVE-2025-25066 has surfaced, impacting the Cisco nDPI (Network Detection and Response Platform) stack. This vulnerability points to a stack-based buffer...
Apache HTTP Server users must be aware of a critical vulnerability known as CVE-2024-10395. This major security issue arises from improper input validation in the server...
The WooCommerce Customers Manager plugin for WordPress is currently facing a significant vulnerability, identified as CVE-2024-13343. This vulnerability stems from a missing capability check in its...
The recent vulnerability CVE-2024-12171 affecting the ELEX WordPress HelpDesk & Customer Ticketing System plugin represents a significant security threat for WordPress users. This weakness is primarily...
The recent discovery of CVE-2025-24891, also known as the “Dumb Drop Root File Overwrite Vulnerability,” has raised significant alarms among tech experts. This critical vulnerability was...
A critical SQL injection vulnerability, known as CVE-2025-0929, threatens the TeamCal Neo software, specifically version 3.8.2. Discovered by security researcher Ignacio Garcia Mestre (Br4v3n) on January...
A critical vulnerability, CVE-2024-52875, has recently been uncovered in GFI KerioControl, a popular firewall and Unified Threat Management (UTM) solution. This flaw impacts versions 9.2.5 through...
