🔴 CVE-2026-79916 - Critical (9.1)

MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace...

https://www.thehackerwire.com/vulnerability/CVE-2026-79916/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88407 - High (7.5)

An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis m...

https://www.thehackerwire.com/vulnerability/CVE-2026-88407/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88406 - High (7.5)

FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _Val...

https://www.thehackerwire.com/vulnerability/CVE-2026-88406/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88411 - High (7.5)

Improper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (Red...

https://www.thehackerwire.com/vulnerability/CVE-2026-88411/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88409 - High (8.8)

FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _De...

https://www.thehackerwire.com/vulnerability/CVE-2026-88409/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94424 - High (8.8)

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is...

https://www.thehackerwire.com/vulnerability/CVE-2026-94424/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-73512 - High (7.5)

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1...

https://www.thehackerwire.com/vulnerability/CVE-2026-73512/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-73552 - High (7.5)

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1...

https://www.thehackerwire.com/vulnerability/CVE-2026-73552/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-73550 - High (7.5)

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1...

https://www.thehackerwire.com/vulnerability/CVE-2026-73550/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-73548 - High (7.5)

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1...

https://www.thehackerwire.com/vulnerability/CVE-2026-73548/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-73547 - High (7.5)

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1...

https://www.thehackerwire.com/vulnerability/CVE-2026-73547/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-81469 - High (7.8)

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Ele...

https://www.thehackerwire.com/vulnerability/CVE-2026-81469/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94501 - High (8.8)

jshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness CRUD endpoi...

https://www.thehackerwire.com/vulnerability/CVE-2026-94501/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94497 - High (8.3)

jshERP through 3.6 fails to validate object ownership in by-id info, update, and delete endpoints...

https://www.thehackerwire.com/vulnerability/CVE-2026-94497/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94496 - High (8.3)

jshERP through 3.6 fails to validate caller permissions in role management endpoints, allowing au...

https://www.thehackerwire.com/vulnerability/CVE-2026-94496/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-83621 - High (8.1)

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, POST /lua/rest...

https://www.thehackerwire.com/vulnerability/CVE-2026-83621/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-84990 - High (8.8)

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260718, scripts/lua/re...

https://www.thehackerwire.com/vulnerability/CVE-2026-84990/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94449 - High (7.5)

A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide str...

https://www.thehackerwire.com/vulnerability/CVE-2026-94449/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-69184 - High (7.5)

c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backw...

https://www.thehackerwire.com/vulnerability/CVE-2026-69184/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-81180 - High (8.8)

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated use...

https://www.thehackerwire.com/vulnerability/CVE-2026-81180/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack