CVE-2026-1245 2

Vulnerability (CVE)

⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

Fortinet confirmed fresh exploitation of an incomplete patch for CVE-2025-59718 and CVE-2025-59719, an authentication bypass via crafted SAML messages that hit devices fully upgraded to the latest release when FortiCloud SSO was enabled. The same recap...

Vulnerabilities & Patching

CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution

Cyber Risks The Hacker News

CERT/CC disclosed CVE-2026-1245 (CVSS 6.5) in the binary-parser npm library, affecting all versions before 2.3.0, which was patched on November 26, 2025. The flaw stems from the library interpolating user-supplied field names and encoding parameters into...

Vulnerabilities & Patching