Organization
8 Interestana reports mention VulnCheck, newest first. Each is summarised from the original reporting and links back to its publisher.
A critical security vulnerability affecting Rejetto HTTP File Server (HFS) is currently being exploited by attackers, as reported by VulnCheck. The vulnerability, identified as CVE-2026-61500, carries a high CVSS score of 9.3, indicating its severe impact.
Threat actors are actively exploiting two critical vulnerabilities affecting Langflow and Ruby on Rails, according to new findings from VulnCheck. These vulnerabilities are being leveraged for credential probing and command-and-control (C2) activities, indicating a significant security risk for users…
VulnCheck has disclosed the presence of two undocumented factory implants embedded within the firmware of routers manufactured by Shenzhen Zhibotong Electronics (ZBT). These implants grant unauthenticated remote attackers the ability to execute commands with root privileges on affected devices.
Marimo has resolved a critical security vulnerability within its notebook software that permitted an attacker to execute a Model Context Protocol (MCP) command supplied by the attacker. This exploit was possible through a specially crafted notebook file, as detailed…
Two critical vulnerabilities affecting the open-source artificial intelligence (AI) platform MLflow and the open-source SCADA/HMI software FUXA are currently being targeted by malicious actors. Independent security researchers from watchTowr and VulnCheck have reported observing active scanning and exploitation attempts…
Cybersecurity researchers have disclosed the presence of a "factory-shipped backdoor" embedded in a significant number of router models manufactured by Zbtlink, a Chinese company. This vulnerability affects at least 20 distinct router models, according to a new report published…
A high-severity security vulnerability affecting the open-source developer platform Windmill is currently being actively exploited by malicious actors, according to VulnCheck. The vulnerability, identified as CVE-2026-29059 with a CVSS score of 7.5, allows for unauthenticated path traversal.
An unpatched security vulnerability, identified as CVE-2026-5027, within the open-source AI application development platform Langflow is actively being exploited. VulnCheck reported on March 18, 2026, that this critical flaw, with a CVSS score of 8.8, enables path traversal, allowing attackers…