Feed

Verified advisories, vulnerability disclosures, and architectural research.

CVE-2026-33634

CVE-2026-33634: Critical Supply Chain Attack on Aquasecurity Trivy Demands Immediate Action

Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive configuration in memory.

Trivy

View Detail

CVE-2025-53521

Critical Alert: CVE-2025-53521 - Immediate Action Required for F5 BIG-IP Stack-Based Buffer Overflow Leading to RCE

F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution.

BIG-IP

View Detail

CVE-2026-3055

Critical Alert: CVE-2026-3055 – Urgent NetScaler Out-of-Bounds Read Requires Immediate Action

Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.

NetScaler

View Detail

CVE-2026-5281

Critical Alert: CVE-2026-5281 Google Dawn Use-After-Free Vulnerability Requires Immediate Patching

Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. This vulnerability could affect multiple Chromium-based products including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Dawn

View Detail

CVE-2026-3502

CVE-2026-3502: Critical Integrity Check Flaw in TrueConf Client Demands Urgent Patch

TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

TrueConf Client

View Detail