VulnHub

Trend Micro has released patches for a significant code execution vulnerability in its Apex Central product. This flaw could allow attackers to execute arbitrary code, putting systems at risk. Tenable has since provided proof-of-concept code and technical details, which could assist malicious actors in exploiting the vulnerability if users do not update their systems promptly. Companies using Apex Central need to apply the patches to protect their networks from potential attacks. The urgency of this update is underscored by the fact that vulnerabilities of this nature can lead to serious breaches if left unaddressed.

Trend Micro has addressed a serious vulnerability in its Apex Central software, which is used for centralized management of security solutions. This flaw could allow attackers to run arbitrary code with SYSTEM privileges, potentially giving them full control over affected systems. The vulnerability affects the on-premise version of Apex Central, putting companies that rely on this tool at risk. Users are advised to apply the latest patches immediately to protect their systems from potential exploitation. This incident underscores the need for regular updates and vigilance in cybersecurity practices.

A newly identified vulnerability in the n8n authentication platform could allow hackers to take control of n8n servers. This flaw poses a significant risk, as n8n is widely used for automation and workflow management, meaning that a breach could lead to unauthorized access to sensitive data and workflows. Users of n8n need to be aware of this vulnerability to protect their systems. The potential for exploitation raises concerns about data integrity and operational security for businesses relying on this platform. Immediate action is recommended to mitigate the risks associated with this vulnerability.

Researchers have identified 11 critical security vulnerabilities in Coolify, an open-source platform for self-hosting applications. These flaws could allow attackers to bypass authentication and execute arbitrary code on affected servers. Notably, one of the vulnerabilities, CVE-2025-66209, has a maximum severity score of 10.0, indicating the potential for severe exploitation if left unaddressed. Users of Coolify need to take immediate action to secure their installations, as these vulnerabilities could lead to full server compromise. This incident underscores the importance of regularly updating and monitoring open-source software to mitigate risks.

Researchers have identified a serious vulnerability in n8n, an automated workflow platform used by around 100,000 servers for AI and enterprise tools. This defect could allow attackers to exploit the system, putting sensitive data and operations at risk. Organizations utilizing n8n need to take immediate action to protect their systems. The flaw is considered to have maximum severity, which means it poses a significant risk to affected users. As the situation develops, it is crucial for companies to stay informed and implement necessary security measures to mitigate potential attacks.

The jsPDF library, widely used for generating PDF documents in JavaScript applications, has a critical vulnerability that allows attackers to access sensitive data from a user's local filesystem. This flaw enables malicious actors to embed local files into generated PDFs, potentially leading to data breaches. Developers using jsPDF in their applications should be particularly vigilant, as this could affect any application relying on this library for PDF generation. The implications are serious, as sensitive information could be easily extracted without user consent. Users of applications built with jsPDF need to be aware of this risk and ensure that they update to the latest version as soon as a fix is available.

A serious vulnerability in n8n, known as Ni8mare (CVE-2026-21858), has been identified, allowing attackers to gain full control over affected instances without any authentication. This flaw has a maximum severity score of 10.0, indicating a high level of risk for users. Researchers from Cyera discovered this vulnerability, raising concerns about the security of workflow automation processes that many organizations rely on. If exploited, this could lead to unauthorized access, data breaches, and significant operational disruptions. Users and companies utilizing n8n should take immediate steps to secure their systems to prevent potential exploitation.

Logitech's Options+ and G Hub applications for macOS have stopped functioning due to an expired code-signing certificate. This issue means that users are unable to launch these applications on their Apple systems, impacting those who rely on them for device customization and management. The problem arose suddenly, leaving many users without access to essential features. While this isn't a security vulnerability or breach, it does highlight the importance of maintaining valid certificates for software integrity and user access. Logitech will need to address this promptly to restore functionality for affected users.

A serious security flaw known as 'Ni8mare' has been discovered in the N8N workflow automation platform, which could allow attackers to remotely take control of servers running the software. This vulnerability is particularly concerning as it does not require any authentication, making it easier for malicious actors to exploit. Users of N8N should be alarmed, as the flaw affects all locally deployed instances. Companies and individuals using this platform need to prioritize patching their systems to avoid potential breaches. The implications are significant, as a successful attack could lead to unauthorized access to sensitive workflows and data.