NGINX – Heap Buffer Overflow (CVE-2026-42533)

Scope: NGINX Plus and NGINX Open Source (Configurations utilizing regex-based map directives, non-cacheable variables, or the Stream ssl_preread module)

Read More

GitHub MCP Server – NULL Pointer Dereference Denial of Service (CVE-2026-47427)

Scope: GitHub MCP Server, Versions Prior to 1.1.0

Severity: High

Read More

Adobe Photoshop Installer – Uncontrolled Search Path Element (DLL Hijacking) (CVE-2026-48388)

Scope: Adobe Photoshop Installer Component

Severity: High

Read More

NVIDIA DCGM Exporter – Uncontrolled Resource Consumption Denial of Service (CVE-2026-47483)

Scope: NVIDIA DCGM Exporter

Severity: Medium

Read More

Microsoft Azure Portal Unauthenticated Information Disclosure Server-Side Patched (CVE-2026-62835)

Scope: Microsoft Azure Portal (All Tenants, Exclusively Cloud-Hosted Service)

Severity: Red

Read More

Devolutions PowerShell Universal Authenticated Code Injection Enables Full Server Compromise (CVE-2026-16801)

Scope: Devolutions PowerShell Universal Versions 2026.2.2 and Earlier

Severity: High

Read More