Patch/Configuration Management

The Hacker News reports that Anthropic's Claude Code has been impacted by a trio of now-addressed security flaws, which could have been harnessed to enable remote code execution and API credential compromise.

The vulnerability, tracked as CVE-2025-13942, is a command injection flaw within the UPnP function of various Zyxel CPE and extender models.

The vulnerability is an operating system command injection flaw (CWE-78) that allows an authenticated user to execute arbitrary commands via specially crafted HTTP requests.

By exploiting one Cisco SD-WAN controller, attackers can push policy changes to every corner of the enterprise.

The Black Duck 2026 OSSRA report explores AI as one of several factors in the historic increase.

SolarWinds has issued fixes for four critical vulnerabilities impacting its Serv-U self-hosted Windows and Linux file transfer software, which could be weaponized to enable remote code execution, according to The Register.

The most severe vulnerability, CVE-2026-22719, is a command injection flaw with a CVSS score of 8.1.