Two critical CVSS 9.9 flaws in OpsTree BuildPiper before 2.7.0 let authenticated project or deploy users gain cluster-admin rights or mount a worker node's root filesystem. No exploitation is reported in CISA's KEV catalog.
A critical use-after-free in MongoDB Server's replication component, rated CVSS 10.0, can be triggered without authentication on replica set members. It can…
A critical authentication bypass (CVSS 9.8) in Barracuda Email Security Gateway before 9.4.0.030 lets unauthenticated attackers change the appliance's global configuration. CISA…
CISA has added two N-able N-central flaws, CVE-2025-8875 and CVE-2025-8876, to its KEV catalog. On-premises MSP deployments should upgrade to 2025.3.1 now.
