Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
623 articles about Vulnerabilities
Decision Insights Threat Desk • August 23, 2026
Analog Way Picturall Quad Compact Mark II version 3.5.8 has CVE-2026-14985 enabling root via a maintenance script. Fixed in 3.5.9.
Decision Insights Threat Desk • August 23, 2026
GNU Wget versions 1.25.0 and earlier can redirect FTP passive mode data connections using unvalidated PASV IPs, exposing internal responses.
Decision Insights Threat Desk • August 23, 2026
SGLang CVE-2026-14890 allows unauthenticated remote code execution via pickle deserialization when the expert-parallel backup subsystem is enabled.
Decision Insights Threat Desk • August 23, 2026
CVE-2026-59762, CVE-2026-59173 and CVE-2026-44909 describe an HTTP/2 DoS via stalled flow control buffering.
Decision Insights Threat Desk • August 23, 2026
Alinto SOGo versions prior to 5.12.8 contain an XSS flaw in how they render ICS (iCalendar) DESCRIPTION content, allowing an SVG payload with JavaScript to execute in the webmail interface and potentially expose mailbox data. The advisory identifies the issue as CVE-2026-8496.
Decision Insights Research • August 23, 2026
Weekly roundup covering enterprise 5G and AI infrastructure planning, Spark GPU acceleration, data center economics, and security flaw disclosures.
Decision Insights Research • August 23, 2026
Weekly roundup covering enterprise 5G strategy, Cloudera and Teleport infrastructure platform updates, and multiple security flaw disclosures, plus AI and data center infrastructure market reporting.
Decision Insights Research • August 22, 2026
Decision Insights Coverage • August 19, 2026
Netskope’s security red team describes sandbox tests using frontier AI models to probe its code, including memory corruption hunting and verification.
Decision Insights Signals • August 18, 2026
Rapid7’s Q2 2026 report said newly exploited vulnerabilities rose from 8% to 40%, with more zero-click flaws, missing authentication, and ransomware geography changes.
Decision Insights Signals • August 7, 2026
Apiiro joined Chainguard-led Athena and integrated platforms, making AutoFix free for open source maintainers.