CyberHighConfirmedDeveloping
10.0
Critical pre-auth RCE vulnerability identified in OpenWrt DHCPv6 service
The Hacker News·2 days ago
CyberConfirmedHighDevelopingFeatured
10.0
Third-party PoC confirms Rails Active Storage RCE exploit chain
A third-party proof-of-concept has successfully reproduced a remote code execution (RCE) vulnerability in Rails Active Storage. The Rails Security Team confirmed the affected versions but stated that versions 7.1 and earlier will not receive security backports, forcing users to upgrade to remain protected.
Score Breakdown
Mosaic Score10.0
Confidence0.9
Significance0.8
Source credibility0.5
Related signals
8 foundCyberHighConfirmedDeveloping
10.0
Ruflo MCP tools vulnerability allows unauthenticated remote code execution
The Hacker News·1 day ago
CyberHighConfirmedDeveloping
10.0
vBulletin patches critical pre-authentication remote code execution vulnerability
BleepingComputer·2 days ago
CyberHighConfirmedAccelerating
8.7
Active exploitation of critical command injection vulnerability in Arista VeloCloud Orchestrator
The Hacker News·US·3 days ago
CyberHighConfirmedAccelerating
8.7
Critical Gitea RCE vulnerability (CVE-2026-60004) allows unauthorized shell command execution
The Hacker News·1 day ago
CyberHighSingle-sourceDeveloping
7.7
Active exploitation of FastJson remote code execution vulnerability reported
BleepingComputer·US·3 days ago
TechNotableConfirmed
10.0
Apple releases security updates addressing 242 vulnerabilities across iOS and macOS
SecurityWeek·US·2 days ago
CyberHighConfirmedAccelerating
10.0
Legacy 2002 Vulnerability in Baseboard Management Controllers Enables Remote Server Takeover
Dark Reading·2 days ago