CVE-2026-83844 2

Vulnerability (CVE)

Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It

A remote code execution flaw in Windows Paint, CVE-2026-83844, is fixed only in Microsoft Store build 11.2609.401.0, not through Windows Update; Microsoft rates it Important with a CVSS score of 8.1 and says exploitation requires a deep understanding of...

Vulnerabilities & Patching

⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More

Cyber Risks The Hacker News

Threat actors are attempting to exploit CVE-2026-123158 (CVSS 8.1), codenamed SSHole, an OpenSSH flaw that can enable sign-ins to accounts with no password set on Linux systems running OpenSSH on the musl C library with PAM disabled, including Alpine...

Threat Actors & Nation-State