2026-02-15

2026-02-16

2026-02-17

All (4) Critical (4) High (20) Medium (40) Low (24)

CVE-2026-2577 Feb 16, 10:16 CRITICAL Act Now

Nanobot WhatsApp bridge binds its WebSocket server to all interfaces (0.0.0.0) without authentication (CVSS 10.0), exposing the WhatsApp bridge to remote access.

NVD GitHub

CVSS 3.1

10.0

EPSS

0.1%

CVE-2026-2439 Feb 16, 22:22 CRITICAL PATCH Act Now

Perl Concierge::Sessions 0.8.1-0.8.4 generates insecure session IDs using weak randomness, enabling session prediction.

Information Disclosure Concierge

NVD GitHub

CVSS 3.1

9.8

EPSS

0.1%

CVE-2026-2550 Feb 16, 10:16 CRITICAL Act Now

ipTIME A6004MX router has an access control vulnerability in VPN client configuration enabling unauthorized network access.

Authentication Bypass File Upload

NVD GitHub VulDB

CVSS 3.1

9.8

EPSS

0.1%

CVE-2025-15578 Feb 16, 22:22 CRITICAL Act Now

Perl Maypole 2.10-2.13 generates session IDs insecurely using a weak PRNG, enabling session prediction and hijacking.

Information Disclosure Maypole

NVD

CVSS 3.1

9.8

EPSS

0.1%