CVE-2026-71308

Netflix Lemur versions 0.5.0 through 1.9.2 accept unauthenticated replaces[] identifiers, allowing an authenticated non-read-only user to silence victim certificate notifications, exclude them from reissue rotation, and substitute attacker-controlled certificates at scale. CVSS 8.1 (HIGH). Fixed ...

Ubuntu: Security Advisory (USN-350-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Millions of Connected Cameras Open to Eavesdropping

Millions of connected security and home cameras contain a critical software vulnerability that can allow remote attackers to tap into video feeds, according to a warning from the Cybersecurity and Infrastructure Security Agency CISA. The bug CVE-2021-32934, with a CVSS v3 base score of 9.1 has be...