Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory Source: The Hacker News Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-59726 (CVSS score: 10.0), impacts all ve Read original
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass Source: The Hacker News Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server (MDS) that has come under active exploitation in the wild. The vulnerability, tracked as CV Read original
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass Source: The Hacker News Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server (MDS) that has come under active exploitation in the wild. The vulnerability, tracked as CV Read original
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass Source: The Hacker News Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server (MDS) that has come under active exploitation in the wild. The vulnerability, tracked as CV Read original
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass Source: The Hacker News Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server (MDS) that has come under active exploitation in the wild. The vulnerability, tracked as CV Read original
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass Source: The Hacker News Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server (MDS) that has come under active exploitation in the wild. The vulnerability, tracked as CV Read original
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass Source: The Hacker News Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server (MDS) that has come under active exploitation in the wild. The vulnerability, tracked as CV Read original
New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands Source: The Hacker News Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account. Tracked as CVE-2026-60004 (CVSS score: 9 Read original
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In Source: The Hacker News JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises version Read original
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In Source: The Hacker News JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises version Read original