Stories

CVE

Stories curated for CVE

CISA Adds Six Exploited Flaws, Including Reported Plex2Shell
Cybersecurity

CISA Adds Six Exploited Flaws, Including Reported Plex2Shell

CISA added six actively exploited CVEs: four Plex flaws linked as Plex2Shell, plus SiteGuard and Siemens bugs for organizations to assess and patch.

2 min read
GitLab Races to Patch CVSS 10.0 Flaw That Let Unauthenticated Attackers Run Server Code
Tech News

GitLab Races to Patch CVSS 10.0 Flaw That Let Unauthenticated Attackers Run Server Code

GitLab has shipped emergency patches for CVE-2026-97229, a maximum-severity CVSS 10.0 flaw in its CI/CD regular expression compiler that could allow unauthenticated remote code execution on self-managed servers. Rapid7 has independently confirmed working exploitation, making urgent upgrades essential.

4 min read