CVE-2026-126759 is a vulnerability in the H3C ICG2000 Unified Communication Gateway 2023 version. It involves missing authentication in the Web Management Module, specifically related to processing the file /wnm/check.j. This flaw allows remote attackers to bypass authentication. Exploit code has been published, but no confirmed exploitation in the wild is reported. The vendor has acknowledged the report but has not provided further response or patch information.
Red Hat has released a critical security update for its OpenJDK 8 build (version 8u512) for portable Linux. This update replaces previous builds 8u502 and 8u504 and addresses multiple security vulnerabilities across various components of the Java runtime and development kit. The fixes enhance security in areas such as PKCS5 padding, TLS certificate handling, LDAP logins, SASL authentication, HTTP client and server handling, certificate checks, XML processing, image handling, and Kerberos validation among others. The update includes numerous CVEs indicating a broad scope of improvements to prevent potential exploitation.
Two security vulnerabilities have been identified in the perl-DBI package used in Red Hat Enterprise Linux 10. The first (CVE-2026-78030) allows loading arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. The second (CVE-2026-88815) can cause a denial of service through an invalid memory read during numeric type casting. Red Hat has issued an important security advisory with updates to address these issues.
ARTEX and similar AI-powered red teaming tools are being used by attackers to autonomously conduct adaptive penetration testing and intrusion attempts. These tools lower the skill barrier for attackers, enabling complex, multi-stage attacks without exploiting software vulnerabilities. Unit 42 observed ARTEX-driven campaigns targeting internet-exposed assets and cloud environments globally. The autonomous nature of these tools results in noisy, high-frequency attack traffic that defenders can detect and block. Defenders can leverage identical AI frameworks internally to proactively identify and remediate exposures. Behavioral hallmarks such as think-then-act cadence, rapid credential validation, and self-correction characterize ARTEX activity. Defensive deception and continuous asset discovery remain effective mitigations.
CVE-2026-126758 is a vulnerability in Moonshot AI Kimi Code versions 2.0.0, 2.0.1, and 2.0.2. It involves reliance on untrusted inputs in a security decision within the WorkspaceDirsService component, specifically related to manipulation of the additional_dir argument in the .kimi-code/local.toml file. The attack requires local access. A public exploit exists. Upgrading to version 2.1.0 resolves the issue.
Zipline versions before 4.8.0 have a race condition vulnerability in the file view counting mechanism. This flaw allows remote attackers to bypass file maxViews limits by sending parallel requests that exploit non-atomic increments of the view count. The issue is fixed in version 4.8.0.
Zipline versions 4.3.2 through before 4.8.0 have a rate limit bypass vulnerability. This flaw allows unauthenticated attackers to evade throttling by spoofing the X-Forwarded-For header when the core.trustProxy setting is enabled. By sending different X-Forwarded-For values per request, attackers can obtain fresh rate-limit buckets, enabling unlimited guessing of login passwords, TOTP codes, and file and URL passwords. The vulnerability is fixed in version 4.8.0.
Zipline versions 4.0.0 through 4.7.x contain an upload filter bypass vulnerability. This flaw allows users with upload permissions to store file types that should be blocked due to a mismatch in extension format checking. The vulnerability arises because the upload handlers compare dotted, case-sensitive file extensions against undotted disabled extension entries, enabling bypass of administrator restrictions. The issue is fixed in version 4.8.0.
Zipline versions 4.6.2 up to but not including 4.8.0 have a vulnerability that allows authenticated users to bypass administrator restrictions on MIME types by modifying file metadata. This enables attackers to upload files with allowed types and then change their MIME type to a disabled one such as text/html, potentially causing the server to serve these files with dangerous content types.
Red Hat issued a security advisory for webkit2gtk3, addressing multiple vulnerabilities in the Chromium browser components Skia and ANGLE. The vulnerabilities include out of bounds reads, buffer overflows, use after free, uninitialized resource usage, and race conditions. These issues affect the WebKitGTK port of the WebKit rendering engine on the GTK platform. The update is rated as important by Red Hat Product Security and is available for Red Hat Enterprise Linux 9 on multiple architectures.
CVE-2026-126757 is an open redirect vulnerability in Moonshot AI Kimi Code versions 2.5.0, 2.5.1, and 2.5.2. It affects the isOriginAllowed function in the Web UI component, allowing remote attackers to manipulate the kimi_origin argument to redirect users to arbitrary URLs. The vulnerability has a medium severity score of 5.3 and has been publicly disclosed. The vendor has not responded to the disclosure, and no patch or remediation is currently available.
Two denial of service vulnerabilities have been identified in the c-ares C library, which handles asynchronous DNS requests and name resolution. The first vulnerability (CVE-2026-69186) involves unvalidated DNS header record counts leading to denial of service. The second (CVE-2026-69184) allows CPU exhaustion through unbounded DNS name compression pointer chains. Red Hat has issued security updates for Red Hat Enterprise Linux 10.2 Extended Update Support and related variants to address these issues.
CVE-2026-126899 is a use-after-free vulnerability in the Elements component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability has been assigned a high severity rating by Chromium security. A fix is available in Chrome version 157.0.8103.78.
An information leak vulnerability exists in the Skia component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker to obtain cross-origin data by crafting a malicious HTML page. The issue has been assigned a high severity level by Chromium security. A fix is available in Chrome version 157.0.8103.78.
An incorrect authorization vulnerability in the FileSystem component of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to potentially execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page. This issue has been fixed in version 157.0.8103.78.
An out of bounds read vulnerability exists in the Media component of Google Chrome prior to version 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue has been fixed in Chrome version 157.0.8103.78.
An out of bounds read vulnerability exists in the Compositing component of Google Chrome prior to version 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially crafted HTML page. The vulnerability has been assigned a high severity by Chromium security. A fix is available in Chrome version 157.0.8103.78.
A use-after-free vulnerability in the Accessibility component of Google Chrome prior to version 157.0.8103.78 allows remote attackers to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability has been fixed in Chrome version 157.0.8103.78.
A type confusion vulnerability in the V8 engine of Google Chrome prior to version 157.0.8103.78 allows a remote attacker to potentially execute arbitrary code within the sandbox via a crafted HTML page. This vulnerability has been assigned a high severity by the Chromium security team. The issue is fixed in Chrome version 157.0.8103.78.
A high-severity vulnerability in Google Chrome on Mac prior to version 157.0.8103.78 allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This issue is due to incorrect reference resolution in the browser.