π¨ New HIGH CVE detected in AWS Lambda π¨
CVE-2026-70175 impacts Microsoft.AspNetCore.App.Runtime.linux-x64 in 4 Lambda base images.
Details: https://github.com/aws/aws-lambda-base-images/issues/760
More: https://lambdawatchdog.com/

π¨ New HIGH CVE detected in AWS Lambda π¨
CVE-2026-70175 impacts Microsoft.AspNetCore.App.Runtime.linux-x64 in 4 Lambda base images.
Details: https://github.com/aws/aws-lambda-base-images/issues/760
More: https://lambdawatchdog.com/
π¨ EUVD-2026-100984 π 8.7/10 π’ NLnet Labs π A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack w... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100984 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-100985 π 8.7/10 π’ NLnet Labs π Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbi... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100985 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2021-10053 π 3.7/10 π libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the co... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10053 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-100986 π 7.5/10 π’ Crocoblock π Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Leve... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100986 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-100987 π 7.5/10 π’ VillaTheme π Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-custom... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100987 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-100988 π 8.5/10 π’ Webnus π Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-ca... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100988 #cybersecurity #infosec #cve #euvd
π¨ New CRITICAL CVE detected in AWS Lambda π¨
CVE-2026-88092 impacts Microsoft.AspNetCore.App.Runtime.linux-x64 in 4 Lambda base images.
Details: https://github.com/aws/aws-lambda-base-images/issues/759
More: https://lambdawatchdog.com/
π¨ EUVD-2026-100990 π 5.4/10 π’ TSplus π Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes director... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100990 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-100989 π 8.7/10 π’ TSplus π Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with vali... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100989 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2021-10054 π 5.3/10 π curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET serv... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10054 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-100991 π 4.4/10 π’ Hewlett Packard Enterprise π A security vulnerability inΒ HPE NonStop TSQLEXE may cause application crash via a crafted SQL query. π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100991 #cybersecurity #infosec #cve #euvd
π¨ New CRITICAL CVE detected in AWS Lambda π¨
CVE-2026-70188 impacts Microsoft.AspNetCore.App.Runtime.linux-x64 in 4 Lambda base images.
Details: https://github.com/aws/aws-lambda-base-images/issues/758
More: https://lambdawatchdog.com/
π¨ New MEDIUM CVE detected in AWS Lambda π¨
CVE-2026-101899 impacts axios in 4 Lambda base images.
Details: https://github.com/aws/aws-lambda-base-images/issues/757
More: https://lambdawatchdog.com/
π¨ Lambda Watchdog CVE Report π¨
Latest AWS Lambda image scan detected 122 CVEs across 27 images:
β’ π΄ Critical: 3
β’ π High: 57
β’ π‘ Medium: 54
β’ π΅ Low: 8
Check the full report π https://lambdawatchdog.com/
#AWS #Lambda #CVE #CloudSecurity #Serverless
CVE-2026-110238 - rapyd-admin
Versions of Rapyd Admin from 9.0.0 up to but not including 9.20.0 let a regular employee with the default customer role edit or remove any user account. This could be used toβ¦
Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-110215 - youlai-boot
The Youlai-Boot application (versions up to 2.21.1) lets any loggedβin user change menu and button permissions for a role, which can be used to give themselves fullβ¦
Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-110207 - wukong aicrm
The Wukong AICRM system lets any loggedβin user change user, role, department and agent settings because it does not verify administrator privileges. An attackerβ¦
Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-104816 - misskey
The Misskey social platformβs RSS widget shows links from feeds without checking the type of link. If an attacker supplies a specially crafted link, clicking it can causeβ¦
Too many irrelevant or confusing CVEs? Use stackflag.com
π¨ EUVD-2020-7355 π n/a π In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for c... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7355 #cybersecurity #infosec #cve #euvd