Vulnerabilities coverage from RedTeam Monitor holds 125 articles, 28 of them reference guides. The newest was published on October 21, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include OWASP Top Ten and FIRST: Common Vulnerability Scoring System.
A high-severity flaw in the Pillow library allows attackers to crash Python services by appending malicious PDF files, a vulnerability resolved in the latest release.
A high-severity flaw in the MCP SDK allowed shared clients to access each other’s tasks. Version 1.32.0 patches the issue by tying tasks to their creating sessions.
A critical heap overflow in Pillow allows arbitrary memory writes via standard lossless JPEG files, enabling potential remote code execution for users of version 12.3.0 and earlier.
Leaked details of two critical PHP vulnerabilities have triggered urgent patching warnings from the project maintainers and security firms.
A critical stack overflow in Tenda AC19 firmware allows remote attacks, with public exploit code already available.
A missing authentication check in HKUDS Vibe-Trading versions before 0.1.7 allows attackers to execute root commands and upload files without credentials.
A flaw in AWS CICD-toolchain-for-serverless-applications versions 1.0.7 through 1.0.10 let repository pushers access external resources in the same account.
Attackers with login access to specific TOTOLINK firmware can execute arbitrary code via a command injection vulnerability rated critical by the NVD.
A critical flaw in the X2000R allows remote code execution via a crafted HTTP request, requiring only valid login credentials to trigger.
Multiple critical flaws in the X2000R firmware allow remote code execution through crafted HTTP requests targeting PPPoE settings.
A critical stack overflow in the X2000R's web server lets attackers run code after logging in, according to new National Vulnerability Database records.
A stack-based buffer overflow in specific Totolink X2000R firmware allows remote code execution via crafted HTTP requests, according to the National Vulnerability Database.
The new cloud service runs four distinct AI agents in parallel to find vulnerabilities that single tools might miss during authorized security assessments.
A critical flaw in the CCC Attestation TLS proof-of-concept allows attackers to relay valid evidence and impersonate workloads, according to the NVD.
The Python imaging library releases version 13.0.0 to fix a critical argument injection vulnerability that allows attackers to execute arbitrary commands via crafted EPS files.
A high-severity flaw in Ning compress-lzf allows attackers to extract sensitive Java memory or crash systems using maliciously crafted data streams.
Unauthenticated users can drain server storage via translation caching, while authenticated accounts can bypass security rules in affected versions.
Attackers could run arbitrary Python code on Mercury servers without credentials. Version 3.2.6 patches the vulnerability that allowed anonymous kernel creation and execution.
Attackers used an unauthenticated flaw in BeyondTrust Remote Support to upload files and deploy web shells on self-hosted appliances.
A critical flaw in Apache Camel enables remote code execution by allowing unrestricted deserialization of data within Hazelcast components.
A critical security issue in the MapSVG product allows unauthorized file uploads, enabling attackers to install web shells on affected systems up to version 8.16.1.
The agency added six vulnerabilities to its catalog after confirming active exploitation of backup and firewall software by threat actors.
Two vulnerabilities in the embedded network stack allow remote manipulation of IPv6 routing and DNS resolution, enabling traffic interception on affected devices.
Attackers exploit a hard-coded secret in Simple Admin Core to forge administrative tokens and seize full system control without valid credentials.