TL;DR TP-Link disclosed five vulnerabilities across its ISP-managed networking gear. The flaws hit mesh systems, routers, PON devices, and xDSL modems. The worst allow authentication bypass and co…

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is a use-after-free in the Linux kernel RDMA/rxe driver. It started as a …

TL;DR CISA disclosed eight vulnerabilities in the Mira Hormone Monitor and its Android app. The worst, CVE-2026-68067, scores a critical CVSS 9.8. It lets a remote attacker control user accounts b…

I’ve always wondered how some people were able to reverse security vulnerabilities and create exploits shortly after their disclosure. So I…

CVE-2026–39987 is a critical pre-authentication Remote Code Execution (RCE) vulnerability affecting Marimo, an open-source reactive Python…

TL;DR Phoenix Contact disclosed three vulnerabilities in PLCnext firmware on August 12, 2026. One flaw, CVE-2025-41771, lets a low-privileged attacker execute unauthorized SQL queries. A second, c…

Severity: Critical

A Microsoft Defender vulnerability patched just one month ago appears to be exploitable once again. A researcher operating under the alias MSNightmare has published ShieldBreak – a new proof…

The personal data of nearly 14,000 Trezor hardware wallet customers was stolen by exploiting a critical zero-day vulnerability in Metabase, the business intelligence platform used by Trezor’…

TL;DR: A critical User Profile Builder vulnerability, carrying a maximum CVSS score of 9.8 and tracked as CVE-2026-15826, now threatens more than 40,000 WordPress sites. It lets unauthenticated at…