search
Offseq
Trends
- 1High-severity flaw reported in NetScaler ADC and Gateway▼CVE-2026-88779 (HIGH, CVSS 8.7) impacts NetScaler ADC & Gateway https:// radar.offseq.com/threat/cve-20 26-88779-vulnera
A new vulnerability tracked as CVE-2026-88779 has been disclosed affecting Citrix NetScaler ADC and NetScaler Gateway, with a high severity rating of 8.7 on the CVSS scale. The finding is circulating among cybersecurity professionals, who are monitoring the flaw for details on exploitation and the availability of patches from Citrix.
- 2Critical CVE-2026-71885 flagged in Bouncy Castle BC-Java●CRITICAL CVE-2026-71885 in Bouncy Castle BC-JAVA ( https:// radar.offseq.com/threat/cve-20 26-71885-cwe-295-improper-cer
Security teams are being alerted to CVE-2026-71885, a critical vulnerability in Legion of the Bouncy Castle's BC-Java cryptography library. The flaw involves improper certificate validation (CWE-295), meaning affected Java applications could trust forged or invalid certificates, opening the door to man-in-the-middle attacks. Given how widely BC-Java is embedded in Java infrastructure, administrators are advised to track for patches and assess exposure.
- 3Bouncy Castle Java library hit by new signature verification flaw●CVE-2026-71887 | Legion of the Bouncy Castle BC-JAVA https:// radar.offseq.com/threat/cve-20 26-71887-cwe-347-improper-v
A new vulnerability, CVE-2026-71887, has been disclosed affecting the Legion of the Bouncy Castle cryptography library for Java. The flaw is classed as CWE-347, improper verification of cryptographic signature, meaning the library may accept signatures it should reject. Security researchers are sharing the advisory and tracking potential impact on Java applications relying on the widely used library.
- 4Critical authentication flaw disclosed in dplugins DevKit Pro●CVE-2026-14378 | CRITICAL vuln in dplugins DevKit Pro ( https:// radar.offseq.com/threat/cve-20 26-14378-cwe-287-imprope
A critical vulnerability, tracked as CVE-2026-14378, has been disclosed in DevKit Pro, a plugin product by dplugins for WordPress. The flaw is classified as CWE-287, improper authentication, meaning the plugin may fail to correctly verify user identity, potentially letting attackers gain unauthorized access to sites running it. Security trackers are flagging it as critical, and WordPress administrators are being urged to check whether they use the affected plugin and apply fixes or mitigations.
- 5Discord libdave hit by critical vulnerability CVE-2026-104480●Discord libdave CRITICAL vuln (CVE-2026-104480, CVSS 9.4): Affected versions 1.1.0 – https:// radar.offseq.com/threat/cv
A critical vulnerability tracked as CVE-2026-104480, rated 9.4 on the CVSS scale, has been reported in Discord's libdave library, affecting version 1.1.0. The flaw is classified as CWE-390, detection of an error condition without action, meaning errors can occur without proper handling. Security researchers are circulating details of the issue and urging users and developers to watch for patches or updated releases.