Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
4 / 4 results
criticalbug_reportVulnerabilityLinux kernel flaw CVE-2026-99999 lets guest VMs read host memory
Linux kernel networking code across all major cloud providers using kernel-based virtualization. Fixed in stable branches: 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57, 7.2.11.
criticalbug_reportVulnerabilityNext.js patches two critical RCE flaws in caching and SVG processing
Next.js versions 10.0.0–15.5.27 and 16.0.0–16.4.0. Critical RCE in React Server Components (v16 with Cache Components enabled, use cache functions returning multiple typed arrays).
criticalbug_reportVulnerabilityNext.js critical RCE flaws in AVIF processing and Windows path traversal
Next.js versions 13.4–15.5.23 and 16.0–16.3.2. CVE-2026-75604 (Windows path traversal, CVSS 9.0) affects Windows-hosted servers using Pages Router or App Router without Cache Components.
highbug_reportVulnerabilityAWS, Google, Vercel agent flaws allow tool execution without model checks
Amazon Bedrock AgentCore InvokeHarness API (fixed July 31, 2026; CVE-2026-18830, CVSS 8.6), open-source Strands Python library (unpatched resume path remains), Google Agent Development Kit (ADK) for Python <2.5.0 (CVE-2026-18236, CVSS 9.3), Vercel AI…