Week in review: Patched curl and libcurl vulnerability, 15 free M365 security training modules
60
42
47
30
Microsoft Patch Tuesday for January 2023 fixed actively exploited zero
60
55
60
30
42
47
60
55
60
60
47
30
47
30
55
Critical ArangoDB Bugs Expose Entire Databases and Enable Remote Code Execution as Root
Two critical ArangoDB flaws (CVSS 9.8/9.9) allow unauthenticated API access and root-level code execution; fixed in 3.12.11.
Remedio researchers reported two critical ArangoDB flaws on August 23, 2026: an authentication bypass via URL-encoded underscores (%5f) in path parsing (GHSA-rrgq-978q-36mq, CVSS 9.8) and a task-execution flaw where a client-controlled isSystem flag lets JavaScript run in the internal context (GHSA-rvhw-4hpw-9vrx, CVSS 9.9). Chained, they allow unauthenticated database access, theft of root password hashes, and root-level code execution when arangod runs as root, such as in the official container image. Patches shipped August 31 in ArangoDB 3.12.11, with GitHub Security Advisories published September 6; CVE identifiers were pending at disclosure time.
72
30
60
35
30
42
55
60
60
30
35
30
30
60
Microsoft Patch Tuesday for July 2021 — Snort rules and prominent vulnerabilities
60
55
30
Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross
60
42
60
42