Vulnerability (CVE)
Microsoft disclosed CVE-2026-42897, a spoofing bug stemming from a cross-site scripting flaw with a CVSS score of 8.1 affecting on-premise Exchange Server, which is under active exploitation in the wild. Microsoft is offering a temporary mitigation through...
CVE-2026-23479 is a use-after-free (CWE-416) in Redis's unblockClientOnKey() in src/blocked.c, introduced in Redis 7.2.0 and present in every stable branch until fixes on May 5, unnoticed for over two years. It was reported by Team Xint Code, an autonomous...
The Miasma self-replicating supply chain worm hit 73 Microsoft GitHub repositories across four organizations - Azure, Azure-Samples, Microsoft, and MicrosoftDocs - prompting GitHub to disable access to them. Miasma is assessed to be a variant of the Mini...