CyberHighConfirmedDeveloping
10.0
Critical pre-auth RCE vulnerability identified in OpenWrt DHCPv6 service
The Hacker News·2 days ago
CyberConfirmedHighDeveloping
10.0
Ruflo MCP tools vulnerability allows unauthenticated remote code execution
A security flaw in Ruflo's Model Context Protocol (MCP) tools leaves 233 deployments exposed to unauthenticated shell command execution. This vulnerability enables attackers to exfiltrate LLM API keys, conversation history, and persistent memory via a single POST request on network-reachable instances.
Score Breakdown
Mosaic Score10.0
Confidence0.9
Significance0.8
Source credibility0.5
Intelligence Tags
Related signals
8 foundCyberHighConfirmedAccelerating
10.0
Third-party PoC confirms Rails Active Storage RCE exploit chain
The Hacker News·about 18 hours ago
CyberHighConfirmedDeveloping
10.0
vBulletin patches critical pre-authentication remote code execution vulnerability
BleepingComputer·2 days ago
CyberHighConfirmedAccelerating
8.7
Critical Gitea RCE vulnerability (CVE-2026-60004) allows unauthorized shell command execution
The Hacker News·1 day ago
CyberHighConfirmedAccelerating
8.7
Active exploitation of critical command injection vulnerability in Arista VeloCloud Orchestrator
The Hacker News·US·3 days ago
CyberHighSingle-sourceDeveloping
7.7
Active exploitation of FastJson remote code execution vulnerability reported
BleepingComputer·US·3 days ago
TechNotableConfirmed
10.0
Apple releases security updates addressing 242 vulnerabilities across iOS and macOS
SecurityWeek·US·2 days ago
CyberHighConfirmedDeveloping
10.0
Critical authentication bypass vulnerability identified in JetBrains TeamCity
The Hacker News·3 days ago