Category
Critical flaws, active exploitation and the playbooks to respond.
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
Google's GTIG data shows CVE disclosures doubled in 2026, n-day exploitation is accelerating, and AI stacks are now targets. See what it means and how to respond.
Protect your web servers from the HTTP/2 Bomb vulnerability. Learn how a chained HPACK and Slowloris attack consumes 32GB of RAM and how to mitigate it.
Critical Ingress-NGINX vulnerabilities threaten Kubernetes security. Learn how to mitigate three of the vulnerabilities CVE-2025-24514, CVE-2025-1097, and CVE-2025-1098 ⚡ Updated Feb 21 2026 for ingress-nginx retirement
Critical vulnerabilities (CVE-2026-24512 & others) discovered in Kubernetes Ingress-NGINX allow arbitrary code execution. Upgrade to v1.13.7 or v1.14.3 immediately to secure your cluster.
MongoBleed (CVE-2025-14847) exposes MongoDB servers to unauthenticated memory leaks due to a Zlib decompression flaw. Learn how attackers exploit uninitialized heap memory and how to patch immediately.
A critical Arbitrary Code Execution vulnerability (CVE-2025-68613) has been discovered in n8n, allowing attackers to execute arbitrary code via workflow expressions. Upgrade to v1.122.0 immediately.
The React2Shell saga continues with CVE-2025-55184. A new critical DDoS vulnerability in React Server Components allows unauthenticated attackers to crash servers via infinite loops. Update immediately.
React2Shell (CVE-2025-55182) exposes React Server Components to a critical Remote Code Execution flaw. Dive into the technical details, the exploitation mechanics, and the urgent remediation steps required to secure your infrastructure.
Urgent Alert: Grafana Enterprise CVE-2025-41115 (CVSS 10.0) allows full admin takeover via SCIM. Update to version 12.3.0 immediately. See the new affected versions and fix details here.
A massive supply chain risk lurks in the VS Code Marketplace. Learn how attackers use typosquatting to impersonate popular extensions and install malware directly into your IDE.
Looking for something specific?
Search every article by topic, tool or CVE.