Data Breaches in 2026: What’s old, what’s new?

Data breaches in 2026 explained, new cyber threats, AI driven attacks, common breach causes, and practical security strategies for individuals and businesses...

DEBIAN-CVE-2025-61147

strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decodercontext::computeframedroptable...

CVE-2026-2945 JeecgBoot uploadImgByHttp server-side request forgery

A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack may be launched remotely. The exploit has bee...

PT-2026-21457

Name of the Vulnerable Software and Affected Versions UTT HiPER 810G versions up to 1.7.7-1711 Description A buffer overflow condition exists in the strcpy function within the /goform/formTaskEdit ap file of UTT HiPER 810G. The issue stems from manipulating the txtMin2 argument. This allows for...

DEBIAN-CVE-2026-27205

Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...

CVE-2020-8165

creationtimestamp| type| source ---|---|--- 2026-02-21 05:21:02+00:00| seen| https://gist.github.com/tu-trinh-scale/43724f4565a68c378a712b69b412cbe1 2026-04-14 10:27:03+00:00| seen| https://gist.github.com/zhaog100/f7442a42e06d52a6f0350990fe3b28f1...

ROOT-APP-PYPI-CVE-2022-38054 CVE-2022-38054 in rootio-apache-airflow - Patched by Root

Root has patched CVE-2022-38054 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...

CVE-2017-4182

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2026-26267

creationtimestamp| type| source ---|---|--- 2026-02-19 21:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaigszi7j2d 2026-02-20 21:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfd33y3zxk23...

BELL-CVE-2026-23189

Bulletin has no description...

BELL-CVE-2026-23160

Bulletin has no description...

CVE-2026-2047

creationtimestamp| type| source ---|---|--- 2026-02-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-120/ 2026-02-21 00:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdcwo4yyx2u 2026-02-25 00:20:09+00:00| seen|...

CVE-2025-70152

creationtimestamp| type| source ---|---|--- 2026-02-18 18:32:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mf5pnzs53q2w...

CVE-2025-60038

creationtimestamp| type| source ---|---|--- 2026-02-18 14:32:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5cbu7hpz2t 2026-02-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-110/...

Important: nvidia-kmod-common

Issue Overview: NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of servic...

Linux Distros Unpatched Vulnerability : CVE-2026-2644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the library core/SolverTypes.h of the component...

CVE-2026-26013 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-33124

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size...

CVE-2026-23130

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dead lock while flushing management frames Commit 1 converted the management transmission work item into a wiphy work. Since a wiphy work can only run under wiphy lock protection, a race condition happens in bel...

tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

A flaw was found in the CGI servlet component of Apache Tomcat. This vulnerability allows a security constraint bypass via improper handling of case sensitivity in the pathInfo component of a URI mapped to the CGI servlet...