Tag

critical severity

2 articles

Vulnerability Analysis 8 Oct 2026

CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.

2 min read

Vulnerability Analysis 8 Oct 2026

CVE-2026-103663: Ollama Path Traversal Vulnerability and RCE Risk Explained

Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function.

2 min read