Vulnerabilities
Secure Windows DNS against CVE-2026-83869: Critical Integer Underflow Enables Unauthenticated Remote Code Execution
An unpatched integer underflow in Windows DNS allows unauthorized attackers to run code remotely, rated 9.8 by NVD.
NVD
Everything Crypt Weekly has reported about NVD: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update Adobe AEM to Fix Critical XSS Session Hijack Vulnerability CVE-2026-83662
A critical cross-site scripting flaw in Adobe Experience Manager allows attackers to hijack sessions if users visit malicious URLs.
Vulnerabilities
Update Adobe ColdFusion 2023/2025 to block CVE-2026-75994 Critical Auth Flaw
A critical authorization flaw in Adobe ColdFusion allows attackers to run code without user interaction, affecting 2023 and 2025 versions.
Vulnerabilities
Patch Obsidian-TC to 1.3.1 to Fix CVSS 9.9 Cross-Vault Data Manipulation Flaw
A critical flaw in Obsidian-TC versions before 1.3.1 allows attackers with valid tokens to read, write, or delete data in any configured vault.
Vulnerabilities
Update ThemeREX Tantra CMS to mitigate critical CVE-2026-93930 object injection vulnerability
The NVD rates CVE-2026-93930 as critical for ThemeREX Tantra CMS versions through 2.9.0, exposing users to object injection risks.