CVE-2026-52371 | xxl-job 3.4.0 /jobinfo/trigger server-side request forgery
A vulnerability was found in xxl-job 3.4.0. It has been rated as critical. This issue affects some unknown processing of
Read MoreMonth: July 2026
CVE-2026-68771 | Comfy-Org ComfyUI up to 0.23.0 LoadTrainingDataset Node /upload/image torch.load deserialization
A vulnerability categorized as critical has been discovered in Comfy-Org ComfyUI up to 0.23.0. Impacted is the function torch.load of
Read MoreCVE-2026-52134 | mz-automation libiec61850 1.6 /goose/goose_receiver.c parseGoosePayload improper authentication
A vulnerability identified as critical has been detected in mz-automation libiec61850 1.6. The affected element is the function parseGoosePayload of
Read MoreCVE-2026-52232 | FS S3150-8T2F Switch 2.2.0D Build 118101 Logo ASP /logo.asp cross site scripting (EUVD-2026-51655)
A vulnerability labeled as problematic has been found in FS S3150-8T2F Switch 2.2.0D Build 118101. The impacted element is an
Read MoreCVE-2026-51953 | liufee FeehiCMS 2.1.1 Session management module privileges management
A vulnerability marked as critical has been reported in liufee FeehiCMS 2.1.1. This affects an unknown function of the component
Read MoreCVE-2026-45086 | Decidim up to 0.31.4/0.32.0.rc1 Demographics Questionnaire Editor edit_questions improper authorization
A vulnerability described as critical has been identified in Decidim up to 0.31.4/0.32.0.rc1. This impacts an unknown function of the
Read More
Online ad firm Adform’s script compromised to steal cryptocurrency
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet
Read More
Arch Linux disables AUR package adoption to stop malware flood
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers
Read MoreInvestigating three real-world incidents in Anthropic’s evaluations
In three incidents across six runs, the agents treated real systems as simulated targets and tried weak passwords or unauthenticated
Read More
Reddit keeps its strange DMCA fight over Google search results alive
Reddit advances lawsuit accusing Perplexity AI of conspiring with web scraper.AI – Ars TechnicaRead More
Read More