Vulnerability is a topic tracked in our intelligence system with 5 linked articles.
Node.js shipped security updates on October 21 fixing 10 flaws across all three supported release lines (22.x, 24.x, 26.x), the most severe being a Brotli decompression bug that permits remote code execution.
A sign-in flaw in Anomaly's OpenCode AI coding agent allowed malicious or hijacked MCP servers to execute code with the developer's own privileges on Windows and WSL machines, patched in version 1.18.33 in September.
cPanel patched a critical privilege-escalation flaw (CVE-2026-58048) that allowed an authenticated hosting customer to run SQL as the database root, with a CVSS of 9.4, via a targeted security release that also closed two other account-boundary routes.
Azure Cosmos DB reportedly exposed a platform-wide key that could grant access to any database, signaling a severe cloud security flaw with broad potential customer and regulatory implications.
N-able reports attackers exploited an authentication bypass in N-central; the initial fix was incomplete, with patch build 2026.3.1.7 released on August 2 as the first unaffected version for affected builds.
Paperclip AI has at least three security flaws allowing attackers to run host commands via malicious agent imports and potentially expose data through API routes.
Subscribe for real-time topic updates and unlimited access to our intelligence platform.