CVE-2026-7482 2

Vulnerability (CVE)

⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, Web Socket Skimmers and More

Attackers have weaponized CVE-2026-6973, an improper input validation flaw in Ivanti Endpoint Manager Mobile (EPMM) that lets authenticated users with administrative privileges run code remotely, and are actively exploiting a zero-day memory corruption...

Vulnerabilities & Patching

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

Cyber Risks The Hacker News

Researchers disclosed CVE-2026-7482, a heap out-of-bounds read in Ollama's GGUF model loader before version 0.17.1, rated CVSS 9.1 and codenamed Bleeding Llama by Cyera, which the source says likely affects over 300,000 servers. An unauthenticated attacker...

Vulnerabilities & Patching