Tag

Vulnerability

8 stories

TightVNC Viewer Pre-Auth RCE: PoC Shows Remote Code Execution Risk

A newly disclosed vulnerability in the TightVNC Viewer allows attackers to execute code on Windows machines before a password prompt appears. Research credited to SeongJoon Cho of SSD Labs Korea includes proof-of-concept exploit code targeting TightVNC 2.8.88 x64. The flaw affects the viewer component and can be triggered when a viewer connects to a malicious server or when the viewer is reachable in Listening Mode. How the bug works The…

Saugata DattaNov 2, 20263 min read96

Cybersecurity

TeamViewer Bug Lets Remote Hosts Crash or Run Code Against Technicians

A recently disclosed vulnerability in TeamViewer can turn an ordinary remote support session into a serious risk for the technician on the other end. Tracked as CVE-2026-111585 and rated High with a CVSS score of 8.8, the flaw lets a malicious host crash the viewer application and, in some cases, execute code on the technician’s machine after a connection has been established. How the flaw works TeamViewer separates sessions into…

Saugata DattaOct 31, 20263 min read112

Cybersecurity

Anthropic Exploit Reveals Critical Linux Kernel Flaw (CVE-2026-98432) That Grants Remote Root on MPTCP Servers

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability—tracked as CVE-2026-98432—that can allow unauthenticated attackers to execute commands as root on servers running Multipath TCP (MPTCP) listeners. The flaw is a use-after-free in the kernel's IPv4 TCP networking code and has been scored 9.8/10 by the Linux kernel CVE team, although some vendors assess exploitation complexity differently. What the flaw is CVE-2026-98432 stems from a…

Saugata DattaOct 31, 20263 min read122

Cybersecurity

Critical Okta Access Gateway Flaw Could Let Admin-Level Input Trigger System Commands

Okta has published an advisory about a high-severity vulnerability in Okta Access Gateway that can allow specially crafted administrative input to trigger system command execution inside the appliance. The issue highlights the continuing importance of limiting and monitoring privileged access to management consoles and of applying vendor patches quickly when they address control-plane weaknesses. What happened Okta disclosed CVE-2026-115547, a vulnerability affecting Okta Access Gateway releases prior to 2026.10.2. According…

Saugata DattaOct 23, 20263 min read218

Cybersecurity

Global websites taken offline after critical PHP vulnerability forces emergency patches

Websites around the world went dark this week after security researchers uncovered a serious flaw in PHP, the programming language that underpins roughly 70% of the web. Governments and organisations ordered precautionary takedowns while a patch was released, but experts warned that a long tail of unmaintained sites could remain vulnerable for weeks or months — creating a persistent window for exploitation. What happened Researchers reported a critical vulnerability in…

Saugata DattaOct 22, 20264 min read242

Compliance and Privacy

Atlassian Urges Immediate Patching After Critical Arbitrary File-Access Flaw

Atlassian has released emergency fixes for a critical arbitrary file access vulnerability that affects eight of its products — including Jira, Confluence, and Bitbucket. Tracked as CVE-2026-21589 with a CVSS score of 9.3, the flaw allows unauthenticated attackers to retrieve specific files from an application’s web root if they can guess the exact path and filename. While the bug does not let attackers enumerate directories, the ability to fetch particular…

Saugata DattaOct 6, 20264 min read329

Azure

One-Click RCE in Azure Windows Admin Center: what happened and what you need to do

Windows Admin Center (WAC) is a convenient, browser-based management hub for administrators to manage servers, clients, and clusters from a centralized interface. A recent Cymulate Research Labs disclosure describes a critical chain of flaws that let an attacker achieve unauthenticated, one-click remote code execution (RCE) against both Azure-integrated and on-premises WAC deployments. The exploit requires little user interaction—a maliciously crafted link—and, if successful, can silently execute arbitrary commands and take…

Saugata DattaApr 17, 20265 min read479

Cybersecurity

Cisco Under Fire: Zero-Day in Secure Firewall Management Center Powers Interlock Ransomware

A critical zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) — tracked as CVE-2026-20131 — has been exploited in the wild to deploy Interlock ransomware. The timeline and technical details reported by independent researchers make this a clear, urgent warning for organizations running Cisco FMC: an unauthenticated remote exploit can lead to arbitrary Java code execution with root privileges, and threat actors used it to build a sophisticated, multi-stage…

Saugata DattaMar 19, 20264 min read793

Free Tools: IP, DNS, SSL