CISA warns of authentication bypass flaws in PowerSYSTEM Center
Multiple CVEs affect Subnet Solutions industrial control software used in energy and manufacturing sectors worldwide.
Month: May 2026
Weekly Security Roundup Highlights Multiple Attack Vectors
Security researchers document exchange server vulnerabilities, npm supply chain attacks, and cloud infrastructure compromise patterns.
CISA warns of privilege escalation flaw in Fuji Electric Tellus software
Industrial control software vulnerability allows users to gain system-level access through exposed kernel driver permissions.
Zero-day exploit bypasses Windows 11 BitLocker encryption protection
YellowKey exploit requires physical access but reliably defeats default BitLocker deployments on Windows 11 systems.
Windows Zero-Day Vulnerability Grants SYSTEM Privileges on Patched Systems
Security researcher releases proof-of-concept for MiniPlasma flaw affecting Windows Cloud Files Mini Filter Driver.
Siemens Power Manager Contains Critical HTTP Smuggling Vulnerability
CISA warns of request smuggling flaw in Siemens SENTRON 7KT PAC1261 Data Manager that could…
Siemens gWAP Vulnerable to Remote Code Execution via Axios Library
Critical infrastructure software affected by prototype pollution vulnerability enabling arbitrary code execution
NGINX CVE-2026-42945 Under Active Exploitation, Causes Crashes
Heap buffer overflow vulnerability affects NGINX versions 0.6.27 through 1.30.0 with possible remote code execution.
18-Year-Old NGINX Rewrite Module Vulnerability Enables Remote Code Execution
Critical heap buffer overflow in ngx_http_rewrite_module affects both NGINX Plus and NGINX Open Source installations.
Siemens Opcenter RDnL systems vulnerable to unauthenticated attacks
Critical manufacturing software affected by missing authentication flaw in underlying ActiveMQ Artemis component.