CVE-2026-92817 is a vulnerability in the Ignition Perspective module of Inductive Automation Ignition. It involves improper validation of session privileges, allowing an authenticated user with Vision project access to escalate to Designer-level privileges by reusing a valid Vision session identifier. This privilege escalation could enable execution of arbitrary code within the Ignition Gateway process. The vulnerability affects versions 8.1.0 through 8.1.54 and 8.3.0 through 8.3.8. It has a high severity with a CVSS score of 8.8.
An OpenAI employee was arrested for secretly installing a sophisticated audio recording device in a conference room to capture sensitive company conversations. The device was concealed in a USB port behind a television and discovered by OpenAI, which promptly reported the incident to the FBI and terminated the employee. The FBI investigation is ongoing, and there is no evidence that the employee accessed or exfiltrated proprietary data such as model weights, source code, or customer information. The employee had unauthorized access to the conference room and used company tools to gather information about office locations and meeting schedules. The incident highlights insider threat risks involving physical espionage within a technology company.
CVE-2026-105390 is a medium severity vulnerability in OpenVPN's ovpn-dco-win component for Windows. It affects versions from 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7. The flaw involves improper synchronization that allows local attackers to cause a deadlock by crafting a write to the ovpn-dco device, potentially making the host system unresponsive.
A Saudi OpenAI engineer was arrested for allegedly planting a hidden recording device in an executive conference room at OpenAI's San Francisco offices. The device was intended to secretly record sensitive conversations. This incident involves insider threat and physical espionage within a corporate environment.
CVE-2026-15468 is an authorization bypass vulnerability in HYPR Passwordless on Windows that allows privilege escalation. It affects versions prior to 11.3.3. The vulnerability arises from a user-controlled key that can be exploited to bypass authorization checks.
CVE-2026-53564 is a medium severity vulnerability in Citrix UniconOS that allows arbitrary file read and write operations. It affects versions before 2607.2 CR and before 2603 LTSR CU2. The vulnerability has a CVSS 4.0 base score of 5.1, indicating a moderate risk. No known exploits are reported in the wild, and no official patch links are provided in the available data.
CVE-2026-53563 is a medium severity vulnerability in Citrix UniconOS that allows persistent command execution. It affects versions before 2607.2 CR and before 2603 LTSR CU2. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a locally exploitable issue with low privileges required and no user interaction needed. No official patch or remediation details are provided in the available data.
An opportunistic cyberattack targeted a European bank's IT infrastructure via a third-party-managed external gateway with weak authentication controls. The attacker used compromised credentials to conduct extensive internal reconnaissance and brute-force password guessing over several months. Attempts to escalate privileges through a Windows Server Update Services (WSUS) vulnerability were detected and blocked by endpoint detection tools, preventing persistent footholds or lateral movement. The incident was contained through rapid detection, credential rotation, and forensic investigation, highlighting the importance of foundational security hygiene and timely response.
CVE-2026-84420 is an out-of-bounds read vulnerability in Citrix Workspace app for Windows. It affects versions before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.8. No patch or remediation information is provided in the available data.
CVE-2026-84419 is an out-of-bounds write vulnerability in Citrix Workspace app for Windows. It affects versions before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1. The vulnerability has a CVSS 4.0 base score of 6.8, indicating a medium severity level. It requires local access with low privileges and no user interaction is needed. There are no known exploits in the wild at this time.
CVE-2026-77207 is a high-severity vulnerability in Libreswan affecting versions 4.7 through 5.3.2 and 5.4 through 5.4. It involves a null pointer dereference in the PKCS#7 handling code during IKE certificate authentication. This flaw can be triggered by a malicious IKE_AUTH packet without requiring peer authentication, causing the Libreswan process to crash and restart, resulting in a denial of service. No remote code execution or data compromise is possible.
Libreswan contains a null pointer dereference vulnerability in its IKEv2 state machine's EAP authentication handling. This flaw can be triggered by any IKEv2 connection, even without EAP configured, due to a code inconsistency. A malicious IKE_AUTH packet can cause the pluto daemon to crash and restart, resulting in a denial of service. No remote code execution is possible.
Libreswan versions 5.3 through 5.3.2 running in FIPS mode have a vulnerability where malformed certificates are rejected but not removed from the NSS cache. This causes legitimate certificates with the same serial number to be rejected, potentially locking out legitimate peers until the service restarts. The issue stems from a missing call to CERT_DestroyCertificate() in the add_decoded_cert() function, related to an incorrect fix for a previous vulnerability (CVE-2026-14957).
CVE-2026-100119 is an Improper Input Validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-102501 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized limited write access without user interaction. The vulnerability has a medium severity with a CVSS score of 5.3. No patch or remediation information is currently provided by the vendor.
Libreswan's pluto daemon contains a use-after-free vulnerability (CVE-2026-94453) triggered when a client using IKE over TCP closes the connection and another packet is received for the same tuple. This causes the daemon to crash and restart, potentially leading to denial of service. The vulnerability exists because the IKE state retains a pointer to a freed iface_endpoint. Remote code execution may be possible. The vulnerability affects configurations with listen-tcp=yes enabled, which is not the default. Versions from 4.0 up to and including 5.3.2 and 5.4 up to and including 5.4 are affected.
CVE-2026-100114 is an improper access control vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access without user interaction. It has a high severity score of 7.5 and does not impact confidentiality or availability but affects integrity.
CVE-2026-100136 is an integer overflow or wraparound vulnerability in the Adobe Content Credentials Rust SDK that can cause an application denial-of-service. This flaw allows an attacker to crash the application without requiring user interaction, resulting in service disruption.
CVE-2026-103294 is an improper certificate validation vulnerability in Adobe Content Credentials Rust SDK. This flaw could allow an attacker to bypass security features and gain unauthorized write access without requiring user interaction. Exploitation depends on conditions outside the attacker's control. The vulnerability has a medium severity rating with a CVSS score of 5.9.
CVE-2026-100139 is an Uncontrolled Resource Consumption vulnerability in Adobe Content Credentials Rust SDK that can lead to application denial-of-service. The flaw allows an attacker to exhaust system resources without requiring any user interaction, potentially causing the application to become unavailable. The vulnerability has a high severity rating with a CVSS score of 7.5.