vulnerability Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database A vulnerability in Azure Cosmos DB, dubbed CosmosEscape by Wiz, allowed an attacker to bypass the service's query sandbox and gain platform-wide access to customer databases. The exploit chain began with a crafted Gremli… The Hacker News · Jul 30, 2026 High azurecosmos dbsecurity
vulnerability Watchfire Controller Software A critical vulnerability (CVE-2026-5846) exists in Watchfire Controller Software, allowing a malicious user to deliver malicious firmware and gain full control of the device. Multiple versions of the software are affecte… CISA Advisories · Jul 30, 2026 Critical CVE-2026-5846UNDOCAcve-2026-5846industrial control systemsfirmware
vulnerability Schneider Electric IGSS Schneider Electric has identified and issued a security advisory (SEVD-2026-195-01) regarding a critical out-of-bounds write vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCADA System) p… CISA Advisories · Jul 30, 2026 High CVE-2026-12927scadaindustrial control systemscwe-787
vulnerability MZ Automation GmbH libiec61850 CISA has issued an advisory regarding multiple vulnerabilities in MZ Automation GmbH’s libiec61850 software, specifically version <1.6.2. These vulnerabilities, all related to out-of-bounds reads, can lead to denial-of-s… CISA Advisories · Jul 30, 2026 High CVE-2026-66720CVE-2026-66369CVE-2026-63550vulnerabilityout-of-bounds readdenial-of-service
vulnerability Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module A vulnerability exists in Rockwell Automation's CompactLogix, ControlLogix, and GuardLogix communication modules (specifically the 1756-EN4TR module) due to improper certificate revocation handling. An attacker could exp… CISA Advisories · Jul 30, 2026 High CVE-2026-9636certificate revocationcip securityindustrial control systems
vulnerability Toptech Systems RCU II+ and Multiload II+ Toptech Systems has issued a vulnerability notice regarding RCU II+ and Multiload II+ devices, exposing a critical unauthenticated service that allows for full system control. Exploitation is not currently possible remot… CISA Advisories · Jul 30, 2026 High CVE-2026-12562vulnerabilitycontrol systemsauthentication
vulnerability Johnson Controls OpenBlue Employee Johnson Controls has released a security advisory (JCI-PSA-2026-09) addressing critical vulnerabilities in its OpenBlue Employee system. These vulnerabilities – including stored XSS, HTML injection, and file upload flaws… CISA Advisories · Jul 30, 2026 High CVE-2026-21662CVE-2026-34495CVE-2026-34497vulnerabilityxsshtml injection
vulnerability MikroTik RouterOS A critical vulnerability (CVE-2026-14227) exists in MikroTik RouterOS, allowing an attacker with low-privilege API access to extract the router's WireGuard private key and decrypt VPN traffic. This could enable full VPN… CISA Advisories · Jul 30, 2026 Critical CVE-2026-14227LVvulnerabilitywireguardcve-2026-14227
vulnerability Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms A critical vulnerability (CVE-2026-59726, CVSS 10/10) in Ruflo, an AI agent orchestration platform, allows unauthenticated attackers to execute commands within the container, potentially leading to remote code execution,… SecurityWeek · Jul 30, 2026 Critical CVE-2026-59726vulnerabilityremote code executionapi key theft
vulnerability Chrome 151 Patches 370 Vulnerabilities Google released Chrome 151, addressing a massive 370 security vulnerabilities. This update includes critical and high-severity bugs across various components, highlighting the ongoing need for diligent security practices… SecurityWeek · Jul 30, 2026 High vulnerabilitychromesecurity
vulnerability Cisco Secure FMC Zero-Day Exploited in the Wild A zero-day vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC) is being actively exploited in the wild. Attackers are leveraging default credentials to gain access to sensitive data, and Cisco… SecurityWeek · Jul 30, 2026 High CVE-2026-20316CVE-2026-20079zero-dayvulnerabilitycisco
vulnerability Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data A zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) software is actively being exploited, allowing unauthenticated remote attackers to gain access to sensitive data. The vulnerability stems from sta… The Hacker News · Jul 30, 2026 High CVE-2026-20316CVE-2026-20079zero-dayauthenticationremote
vulnerability Multiples vulnérabilités dans Node.js (30 juillet 2026) Multiple vulnerabilities have been discovered in Node.js, impacting versions 22.x, 24.x, and 26.x prior to the specified release dates. These vulnerabilities can lead to data integrity compromise, data confidentiality is… CERT-FR · Jul 30, 2026 Medium CVE-2026-48934CVE-2026-56846CVE-2026-56847nodejsvulnerabilitysecurity
vulnerability Multiples vulnérabilités dans GitLab (30 juillet 2026) Multiple vulnerabilities have been discovered in GitLab, including remote denial-of-service, data confidentiality breaches, and remote cross-site scripting (XSS). These vulnerabilities affect GitLab Community Edition and… CERT-FR · Jul 30, 2026 Medium CVE-2025-14562CVE-2026-12436CVE-2026-13113vulnerabilitygitlabcve
vulnerability Vulnérabilité dans Ruby on Rails activestorage (30 juillet 2026) A critical vulnerability has been identified in Ruby on Rails’ activestorage library, allowing attackers to execute arbitrary code remotely and potentially compromise data confidentiality. This affects older versions of… CERT-FR · Jul 30, 2026 Critical CVE-2026-66066ruby on railscvevulnerability
vulnerability Multiples vulnérabilités dans les produits VMware (30 juillet 2026) Multiple vulnerabilities have been discovered in VMware products, including remote code execution, denial of service, and data breach risks. These vulnerabilities affect various versions of VMware Cloud Foundation, ESXi,… CERT-FR · Jul 30, 2026 High CVE-2026-41703CVE-2026-41709CVE-2026-47876vulnerabilitypatchsecurity
vulnerability Vulnérabilité dans CPython (30 juillet 2026) A denial-of-service vulnerability has been identified in CPython, allowing an attacker to disrupt remote systems. Applying the latest security patch from the Python project is crucial to mitigate this risk. CERT-FR · Jul 30, 2026 Medium CVE-2026-6879pythondenial-of-servicevulnerability
vulnerability Multiples vulnérabilités dans Google Chrome (30 juillet 2026) Multiple vulnerabilities have been discovered in Google Chrome, potentially allowing an attacker to cause a security issue. These vulnerabilities are spread across various Chrome versions and are related to a range of is… CERT-FR · Jul 30, 2026 High CVE-2026-17650CVE-2026-17651CVE-2026-17652chromevulnerabilitysecurity
vulnerability Vulnérabilité dans Cisco Firewall Management Center (30 juillet 2026) A vulnerability in Cisco Firewall Management Center (FMC) allows an attacker to compromise data confidentiality and bypass security policies. Cisco has confirmed that CVE-2026-20316 is actively being exploited. Users of… CERT-FR · Jul 30, 2026 High CVE-2026-20316ciscovulnerabilitysecurity
vulnerability Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads A critical vulnerability (CVE-2026-66066, CVSS 9.5) in Ruby on Rails' Active Storage component, using libvips for image processing, allows unauthenticated attackers to read arbitrary files from application servers. This… The Hacker News · Jul 29, 2026 Critical CVE-2026-66066rubyrailslibvips
