The vulnerabilities, discovered by Eclypsium across four different products including GL-iNet Comet RM-1, Angeet/Yeeso ES3 KVM, Sipeed NanoKVM, and JetKVM, enable unauthenticated actors to achieve root access or execute malicious code.
AI agent development and deployment platform LangSmith and high-performance large language model serving framework SGLang have been impacted by vulnerabilities that could allow attackers to take over accounts and run code remotely, respectively, according to The Hacker News.
Cybersecurity Dive reports that organizations' security teams may be disregarding remediation of the high-severity Cisco Catalyst SD-WAN vulnerability, tracked as CVE-2026-20133, after warnings that only emphasized the targeting of the zero-day, tracked as CVE-2026-20127.
