LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Mobyproject

5 CVEs published in the last four months. Exploited flaws first.

Critical0
High5
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-157887.5highbuildkitBuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS direct83d ago
CVE-2026-157897.5highbuildkitA custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-82d ago
CVE-2026-157917.5highbuildkitA crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.82d ago
CVE-2026-157927.5highbuildkitA malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a p82d ago
CVE-2026-157937.5highbuildkitBuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out82d ago

Filter the full tracker by Mobyproject →