On June 30, 2026, NIST’s National Vulnerability Database published CVE-2026-58116, a critical remote code execution vulnerability in LLaMA-Factory, the open-source LLM fine-tuning framework that has quietly become a piece of critical infrastructure for the AI industry. Wit…
On June 23, 2026, NIST’s National Vulnerability Database published CVE-2026-48020, a route-level authentication and authorization bypass in Traefik, the cloud-native reverse proxy and ingress controller that fronts a huge slice of the modern web (and most Kubernetes cluste…
On June 15, 2026, a critical vulnerability was disclosed in AshAuthentication — the authentication extension for the Ash Framework in Elixir — that allows an unauthenticated attacker to take over any local user’s account through the OAuth2 or OpenID Connect sign-in flow. T…
On June 7, 2026, three critical command injection vulnerabilities were published against the GL.iNet GL-MT3000 — better known as the Beryl AX, one of the most popular pocket-sized travel routers on the market. All three share a single devastating root cause: the rou…
A heap buffer overflow in MediaTek’s Wi-Fi Access Point driver lets any associated client on the same network corrupt kernel memory and execute arbitrary code on th…