CVE-2026-58868 2

Vulnerability (CVE)

Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

Google's November security bulletin describes CVE-2026-58868, a critical out-of-bounds write from a heap buffer overflow in the onOutputReceived function of FrameDecoder.cpp that could allow remote code execution without user interaction on Android 14...

Vulnerabilities & Patching

⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More

Cyber Risks The Hacker News

Threat actors are attempting to exploit CVE-2026-123158 (CVSS 8.1), codenamed SSHole, an OpenSSH flaw that can enable sign-ins to accounts with no password set on Linux systems running OpenSSH on the musl C library with PAM disabled, including Alpine...

Threat Actors & Nation-State