Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose ...

In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation. With curated ...

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows Path Traversal. This issue ...

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Recently, Rapid7 observed the Fake Browser Update lure tricking users into executing malicious binaries.

Microsoft is publishing 114 vulnerabilities this January 2026 Patch Tuesday. Today’s menu includes just one vulnerability marked as exploited in the wild, as well as two vulnerabilities where ...

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution. CVSS 3 ...

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Rapid7 is tracking a new, more sophisticated and staged campaign using the Blackmoon trojan, which ...

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privilege Escalation. This issue affects eta-register: from 2.0.8 before 2.0.9. CVSS ...

CVE-2026-89142: Airoha Technology Corp.: In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. View severity, references, and remediation details from Rapid7.

CVSS 3.1 Base Score: 7.5 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) With curated Threat Intelligence, you can see which vulnerabilities truly put ...