The most severe of these security defects could allow remote attackers to execute arbitrary code. The post Critical, High-Severity Vulnerabilities Patched in Apache MINA, HTTP Server appeared first on SecurityWeek .
Cisco Talos identified an intrusion active since at least January 2026 involving the CloudZ remote access tool (RAT) combined with a previously undocumented plugin named 'Pheno'. The Pheno plugin is reported to potentially steal one-time password (OTP) messages, indicating targeted information theft capabilities. No specific affected software versions or patches are currently documented. There is no evidence of known exploits in the wild beyond this discovery. The threat is assessed as medium severity based on the available information.
The security defects allow unauthenticated, remote attackers to execute arbitrary code through crafted requests. The post MetInfo, Weaver E-cology Vulnerabilities in Attackers’ Crosshairs appeared first on SecurityWeek .
A stack-based buffer overflow vulnerability exists in the GStreamer qtdemux component when parsing UncompressedFrameConfigBox structures. This flaw allows remote attackers to execute arbitrary code by exploiting improper validation of user-supplied data length before copying it to a fixed-length stack buffer. GStreamer has issued an update to address this vulnerability. The vulnerability has a CVSS score of 7.8 and is rated critical.
Two critical vulnerabilities were discovered in EnOcean's SmartServer IoT platform, enabling remote attackers to bypass security controls and execute arbitrary code with root privileges. These flaws affect internet-exposed SmartServer devices used in building automation, potentially allowing full takeover of Linux-based systems managing smart buildings, factories, and data centers. The vulnerabilities, tracked as CVE-2026-22885 and CVE-2026-20761, involve improper validation of packet input leading to memory protection bypass and remote code execution. EnOcean has released SmartServer 4.6 update 2 (4.60.023) to address these issues. Legacy i. LON devices are also impacted. Claroty researchers have published technical details and proof-of-concept exploits.
The remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server. The post Critical GitHub Vulnerability Exposed Millions of Repositories appeared first on SecurityWeek .
This vulnerability allows remote attackers to bypass the sandbox on affected installations of OpenAI Codex. User interaction is required to exploit this vulnerability in that the target must use Codex to process a repository containing malicious JavaScript. The ZDI has assigned a CVSS rating of 8.6.
The malware provides remote access and control of infected devices and maintains post-patching persistence. The post US Federal Agency’s Cisco Firewall Infected With ‘Firestarter’ Backdoor appeared first on SecurityWeek .
Researchers discovered a remote code execution vulnerability and cybercriminals are using its reputation to deliver malware. The post Google Antigravity in Crosshairs of Security Researchers, Cybercriminals appeared first on SecurityWeek .
The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws. The post Oracle Patches 450 Vulnerabilities With April 2026 CPU appeared first on SecurityWeek .
The security defects could be exploited for remote code execution, OS command injection, and WAF detection bypass. The post Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster appeared first on SecurityWeek .
This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-5059.
This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3.