2026 - Page 42 of 45

Siemens Power Manager Contains Critical HTTP Smuggling Vulnerability

CISA warns of request smuggling flaw in Siemens SENTRON 7KT PAC1261 Data Manager that could…

Critical infrastructure software affected by prototype pollution vulnerability enabling arbitrary code execution

Heap buffer overflow vulnerability affects NGINX versions 0.6.27 through 1.30.0 with possible remote code execution.

Critical heap buffer overflow in ngx_http_rewrite_module affects both NGINX Plus and NGINX Open Source installations.

Critical manufacturing software affected by missing authentication flaw in underlying ActiveMQ Artemis component.

Cross-site scripting flaw in on-premise Exchange servers enables spoofing attacks via crafted emails.

CISA warns of CVSS 9.1 vulnerability allowing remote file system access in manufacturing environments

Maximum-severity vulnerability CVE-2026-20182 with CVSS 10.0 score has been exploited in limited attacks.

CVE-2026-42897 joins the Known Exploited Vulnerabilities list following evidence of active exploitation in the wild.

Law enforcement caught the siblings after they inadvertently recorded their criminal planning session.