Bleeding Llama (CVE-2026-7482): Critical Unauthenticated Memory Leak in Ollama
Critical Ollama flaw CVE-2026-7482 exposes 300K servers, letting attackers leak API keys, prompts, and credentials through just three…
Category
Security Bulletin
66 articles
CVE-2026-23918: Apache HTTP/2 Double-Free Vulnerability with Possible RCE
CVE-2026-23918 is a high-severity Apache HTTP/2 double-free flaw affecting version 2.4.66. Learn the root cause, who's at risk,…
CVE-2026-41940: Zero-Day Authentication Bypass in cPanel & WHM
A critical zero-day vulnerability in cPanel & WHM is giving attackers unauthenticated root-level access to servers managing over…
CVE-2026-42208: Pre-Authentication SQL Injection in LiteLLM Exposes API Credentials
LiteLLM's unauthenticated SQL injection flaw leaks API credentials across providers. Explore CVE-2026-42208 impact, fixes, and AppTrana WAAP coverage.
CVE-2026-32201: SharePoint Spoofing Vulnerability Enabling Unauthenticated Impersonation
CVE-2026-32201 is an actively exploited SharePoint spoofing flaw. No auth needed. Learn the impact, affected versions, and how…
CVE-2026-34197: Apache ActiveMQ Jolokia RCE Vulnerability
CVE-2026-34197: ActiveMQ Jolokia flaw enables authenticated RCE, exposing sensitive data, credentials, and integrated systems across enterprise environments.
CVE-2026-20963: SharePoint Deserialization Remote Code Execution Vulnerability
A critical SharePoint vulnerability is being used to execute malicious code remotely. Find out what CVE-2026-20963 means and…
CVE-2026-27739: Angular SSR Request Vulnerability Enabling Server-Side Request Forgery
Learn how CVE-2026-27739 in Angular SSR enables SSRF through manipulated request headers & how to mitigate the risk…
CVE-2026-25639: Axios Vulnerability Triggers DoS in Node.js Applications
Axios vulnerability CVE-2026-25639 enables remote DoS in Node.js applications by triggering fatal runtime errors that instantly crash APIs…
CVE-2026-1357: WordPress Plugin RCE Exposes Sites to Full Takeover
CVE-2026-1357 exposes a critical WordPress WPvivid plugin flaw, allowing unauthenticated RCE, enabling attackers to upload PHP files and…
CVE-2026-1281 & CVE-2026-1340: Actively Exploited Pre-Authentication RCE in Ivanti EPMM
Learn how CVE-2026-1281 and CVE-2026-1340 enable pre-auth RCE in Ivanti EPMM, now actively exploited, and how AppTrana helps…
CVE-2025-11953 – Metro4Shell RCE in React Native Metro Server
CVE-2025-11953 (Metro4Shell) enables critical RCE in React Native Metro Server with active exploitation observed. Learn risks & AppTrana…