CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

MetInfo CMS flaw CVE-2026-29014 exploited after April 7 patch, enabling remote code execution and targeting 2,000 instances.

That gap is becoming increasingly visible in the latest wave of AI-driven code review tools. Multi-agent systems can now scan ...

A critical zero-day vulnerability in Microsoft SharePoint is being exploited in the wild right now, and more than 1,300 ...

GitHub has patched a high-severity remote code execution vulnerability that allowed anyone with push access to a private ...

The Ruby vulnerability is not easy to exploit, but allows an attacker to read sensitive data, start code, and install backdoors.

Command injection in Codex and a hidden outbound channel in ChatGPT exposed risks of credential theft and covert data exfiltration. OpenAI has fixed two flaws in its AI stack that could allow AI ...

Google announced on Monday the release of an Android update patching a critical vulnerability that can be exploited for ...

Microsoft-owned open source code hosting platform GitHub has acknowledged and patched a critical vulnerability that allowed ...