Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
623 articles about Vulnerabilities
Decision Insights Signals • April 13, 2026
Synack launched the Glasswing-Readiness Assessment, using Sara and its Red Team to discover and validate exploitable attack paths.
Decision Insights Threat Desk • April 9, 2026
Orthanc DICOM Server 1.12.10 and earlier have nine flaws in image decoding and HTTP handling, causing memory corruption and DoS.
Decision Insights Threat Desk • April 2, 2026
Artifex MuPDF versions through 1.27.0 have CVE-2026-3308, where crafted PDFs can cause out-of-bounds heap writes in PDF image decoding.
Decision Insights Threat Desk • March 30, 2026
CrewAI has vulnerabilities enabling RCE, arbitrary file read, and SSRF, with multiple CVEs tied to Code Interpreter and Docker fallback.
Decision Insights Threat Desk • March 24, 2026
IDrive Cloud Backup Client for Windows before 7.0.0.63 contains CVE-2026-1995 allowing SYSTEM-level arbitrary executables via writable files.
Decision Insights Signals • March 23, 2026
Cycode announced its Agentic Development Security Platform for an agentic development lifecycle. The platform adds orchestration via Cycode Maestro, real-time guardrails for AI agents and code outputs, AI governance for shadow AI and policies, and AI-specific risk detection aligned to OWASP LLM guidance, positioned for enterprise use.
Decision Insights Signals • March 19, 2026
Rapid7 added runtime validation and DSPM to Exposure Command to identify actively exploitable risks and support automated remediation.
Decision Insights Signals • March 18, 2026
Rapid7's 2026 report finds exploited high-severity vulnerabilities rose 105% and exploitation timelines shrank to days.
Decision Insights Signals • March 17, 2026
Huntress introduced new security posture management products for endpoints and identities utilizing AI-driven threat intelligence.
Decision Insights Threat Desk • March 16, 2026
A log-injection flaw in LibreChat RAG API 0.7.0 lets authenticated users alter system logs and audit records.
Decision Insights Threat Desk • March 12, 2026
graphql-upload-minimal v1.6.1 contains a prototype pollution flaw that can modify Object.prototype and affect Node.js processes.
Decision Insights Signals • March 11, 2026
ActiveState named Abby Kearns CEO and moved Stephen Baker to its board to support scaling amid rising enterprise demand for managed open source.