A high-severity Server-Side Request Forgery (SSRF) vulnerability, designated CVE-2026-33626, has emerged in the LMDeploy toolkit, posing a significant threat by enabling attackers to hijack AI inference engines. This critical flaw, first disclosed on April 21, 2026, has sparked considerable concern within the cybersecurity community. Recognized for its role in serving vision-language and large language models […]
A critical security threat is impacting the WordPress ecosystem as a zero-day vulnerability exploits the Breeze plugin from Cloudways, affecting over 400,000 websites. This pervasive risk stems from vulnerabilities such as CVE-2026-3844 and others, putting numerous sites in peril. Exploited in the wild, the cloudways breeze zero day poses a significant security challenge for site […]
A critical vulnerability known as the Pack2TheRoot flaw (CVE-2026-41651), carrying a CVSS score of 8.8, threatens multiple major Linux distributions. The Deutsche Telekom’s Red Team discovered and publicly disclosed this high-severity privilege escalation weakness. Attackers can exploit the flaw to gain root access or compromise the system entirely, posing significant risks to affected platforms. Security […]
In a significant supply chain breach, the official Checkmarx KICS Docker repo was compromised, injecting malicious code. On April 22, 2026, Docker’s monitoring detected suspicious activities with KICS image tags, alerting Socket researchers to investigate. Attackers altered existing tags like v2.1.20 and introduced a dubious v2.1.21 tag without upstream legitimacy. The breach impacted widely used […]