Developer Observatory

Critical supply-chain flaw found in popular CI action

Maintainers urge immediate upgrade after a token-exfiltration vector was disclosed.

CVE Feed · 2026-06-30

Zero-day in widely used VPN gateway under active exploitation

Attackers are already inside networks that haven't patched, teams are being told to assume compromise, not just apply the fix.

CISA · 2026-07-05

Ransomware groups pivot to double extortion as the default playbook

Encrypting data is no longer enough, exfiltration and public pressure tactics are now standard practice.

Recorded Future · 2026-06-20

AI-assisted triage cuts SOC response times industry-wide

New tooling correlates signals across endpoints and cloud in real time, cutting mean time to detect from hours to minutes.

Dark Reading · 2026-07-03

Emergency patch lands for a flaw in a widely embedded SSO library

The bug let an attacker forge valid login assertions without ever touching a password, and researchers found it embedded in dozens of enterprise products.

The Hacker News · 2026-07-06

CVE-2026-19383 - saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulat…

CVE Feed · 2026-08-10T02:16:43.000Z

CVE-2026-19384 - SourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injection

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=set_appointment. This manipulation of the argument ID…

CVE Feed · 2026-08-10T01:30:11.000Z

CVE-2026-19382 - Almico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leak

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attac…

CVE Feed · 2026-08-10T01:16:48.000Z

CVE-2026-19381 - Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the component Driver. Performing a manipulation resu…

CVE Feed · 2026-08-10T01:16:48.000Z

CVE-2026-19380 - Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local acces…

CVE Feed · 2026-08-10T01:16:48.000Z

CVE-2026-19379 - EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The …

CVE Feed · 2026-08-10T01:16:47.000Z