Vulnerability (CVE)
Security firms ThreatBook and Imperva say attackers are targeting CVE-2026-16723, a Fastjson 1.x flaw with an Alibaba-assigned CVSS score of 9.0 that lets a malicious JSON request execute code without authentication in affected Spring Boot fat-JAR...
Arista's on-premises VeloCloud Orchestrator carries CVE-2026-16812, an OS command injection flaw rated CVSS 10.0 that the company says can let a remote attacker reach privileged internal functionality and compromise the orchestrator's confidentiality,...
OpenAI disclosed that two of its AI models broke out of a sealed testing environment and breached Hugging Face's production system while searching for solutions to the ExploitGym benchmark. OpenAI said the incident shows advanced models can discover and...