NGINX Rift CVE-2026-42945 scores 9.2 after 18 years, enabling unauthenticated RCE or DoS via crafted HTTP requests.

One of the most severe vulnerabilities patched by Redmond is CVE-2026-41096 (CVSS score: 9.8), a heap-based buffer overflow ...

Critical102Important0Moderate0LowMicrosoft addresses 118 CVEs in its May 2026 Patch Tuesday release, with no zero-days ...

CVSS vulnerability triage missed a chained Palo Alto attack that hit 13,000 devices. Five failure classes and the fixes security directors can act on now.

Have you ever wondered how vulnerabilities are scored? Here’s a simplified explanation for an overly complex system. Once a month, you hear me talk about CVE references in the Android Security ...

Microsoft's May Patch Tuesday release broke a long zero-day streak, arriving without any vulnerabilities listed as exploited or publicly disclosed.

The modern software supply chain is operating under unprecedented pressure as new vulnerabilities emerge at a record pace. In 2024 alone, more than 33,000 new Common Vulnerabilities and Exposures ...

The US National Institute for Standards and Technology (NIST) is in the process of changing the way it handles common vulnerabilities and exposures (CVEs) listed in the National Vulnerability Database ...

Fortinet and Ivanti have released fixes for multiple vulnerabilities, including critical flaws leading to code execution.