On August 14, 2026, NIST’s National Vulnerability Database published CVE-2026-73678, an unauthenticated remote code execution vulnerability in MindsDB’s Minds Platform — the desktop AI-agent application the company now ships as MindsHub Cowork. NVD scores it a perfec…
On August 6, 2026, NIST’s National Vulnerability Database published two closely related vulnerabilities in html_sanitize_ex, the long-standing HTML-sanitization library for Elixir/Erlang applications. CVE-2026-68749 is a regex-catastrophe in the CSS scrubber; CVE-2026-6875…
A wireless access point, a GoAhead-style httpd, and a single sprintf that copies an attacker-controlled GO parameter straight into a 64-byte stack buffer with no length check. One HTTP POST and the management service segfaults; with the right payload the saved return address is …
On July 30, 2026, NIST’s National Vulnerability Database published CVE-2026-17543, a SQL injection vulnerability sitting not in some neglected WordPress plugin, but in PHP itself — specifically the pgsql extension that ships with the language. NVD scores it 9.8 Critical (C…
On July 25, 2026, NIST’s National Vulnerability Database published CVE-2026-66012, a missing-authorization vulnerability in SiYuan — the privacy-first, block-level note-taking application with over 45,000 GitHub stars and a large Docker-hosted user base. NVD scores it 10.0…