Daily vulnerability watch

Security News

Latest CVE and advisory summaries, rewritten for quick scanning with credit to the original sources.

Security News
Critical Severity

CVE-2026-115931 critical vulnerability summary

Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were n...

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-115929 high vulnerability summary

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updati...

Tenable Newest CVEs Read
Security News
Critical Severity

Critical Vulnerability in GitLab

Attackers can exploit a critical vulnerability in GitLab to execute arbitrary code without authentication. Patch immediately.

Cyber Security Agency of Singapore Read
Security News
Critical Severity

Critical Vulnerability in Fortinet FortiSIEM

Attackers can exploit a critical vulnerability in Fortinet FortiSIEM to execute arbitrary code. Patch immediately.

Cyber Security Agency of Singapore Read
Security News
Critical Severity

CVE-2026-107861 critical vulnerability summary

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user...

Tenable Newest CVEs Read
Security News
Critical Severity

CVE-2026-110243 critical vulnerability summary

The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell comman...

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-110491 medium vulnerability summary

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues oper...

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-110825 high vulnerability summary

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication s...

Tenable Newest CVEs Read