New that day
- criticalpatched Next.js: Remote Code Execution in next/og ImageResponse next (npm) ## Impact The Node.js `ImageResponse` implementation from `next/og` is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation: ```tsx import { ImageResponse } from 'next/og' export async function GET(request:…
- highpatchedexploited Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request. Added to CISA KEV on 2026-09-30 (federal deadline 2026-10-03).