CyberHighConfirmedDeveloping
9.3
Unpatched Kaltura mwEmbed vulnerabilities enable unauthenticated RCE and file exposure
The Hacker News·2 days ago
CyberConfirmedMediumDeveloping
6.6
Next.js patches two critical remote code execution vulnerabilities
Next.js has released security updates addressing two critical vulnerabilities that could allow unauthenticated remote code execution. One flaw specifically impacts Windows-hosted environments, while the other is triggered via AVIF image optimization. No active exploitation has been observed to date.
Score Breakdown
Mosaic Score6.6
Confidence0.9
Significance0.5
Source credibility0.6
Intelligence Tags
Related signals
8 foundCyberHighConfirmedAccelerating
8.8
Critical RCE vulnerability identified in Avada WordPress theme
BleepingComputer·2 days ago
CyberHighConfirmedAccelerating
8.3
Three critical unauthenticated RCE vulnerabilities identified in ServiceNow platforms
The Hacker News·about 11 hours ago
CyberHighSingle-sourceDeveloping
7.8
Active exploitation of PaperCut vulnerabilities enables unauthenticated remote code execution
The Hacker News·about 4 hours ago
CyberNotableConfirmedDeveloping
6.1
Ubiquiti patches 22 vulnerabilities in UniFi product line, including three critical 10.0 CVSS flaws
CyberScoop·2 days ago
CyberNotableSingle-sourceDeveloping
5.6
PaperCut print management software under active zero-day exploitation
The Hacker News·about 13 hours ago
CyberNotableSingle-sourceDeveloping
5.5
CISA confirms active exploitation of Gitea remote code execution vulnerability CVE-2026-60004
SecurityWeek·US·3 days ago
CyberHighConfirmedAccelerating
8.8
GPUThor Rowhammer attack bypasses ECC on NVIDIA RTX A6000 to achieve root privilege escalation
The Hacker News·US·1 day ago