New that day
- criticalpatchedexploited Nx Console Embedded Malicious Code Vulnerability Nx Nx Console Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory. Added to CISA KEV on 2026-05-27 (federal deadline 2026-06-10).
- criticalpatchedexploited TanStack Unspecified Vulnerability TanStack TanStack TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity. Added to CISA KEV on 2026-05-27 (federal deadline 2026-06-10).
- highpatchedexploited Daemon Tools Lite Embedded Malicious Code Vulnerability Daemon Daemon Tools Lite Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integrity, and availability. Added to CISA KEV on 2026-05-27 (federal deadline 2026-05-30).