CVE-2026-90894 2

Vulnerability (CVE)

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

JFrog reported this week that a flaw in Parallels Desktop for Mac lets an ordinary local account run code as root, tracked as CVE-2026-90894 and rated 7.8 out of 10, with the fix in Parallels Desktop 27, a version Intel Macs cannot install. The attack...

Vulnerabilities & Patching

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, Click Fix Attacks, Click Fix Surge, and Browser Hijacks

Cyber Risks The Hacker News

Cisco warned of a maximum-severity authentication bypass in Identity Services Engine, tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation and stems from insufficient authentication control on an API endpoint. The week's...

Vulnerabilities & Patching