A SQL parsing flaw in Postgres MCP Pro lets AI agents bypass restricted mode and read arbitrary files from the database ...

AI's RAG platform let attackers run arbitrary queries as PostgreSQL superuser - and the default config has auth turned off.

Hackers have been exploiting a critical-severity vulnerability (CVE-2026-9586) in the enterprise VoIP telephony management solution Sangoma Switchvox.

AI-assisted cyberattacks targeted Asian governments, using stolen credentials, vulnerable servers, webshells, and custom ...

The relational database has been acquiring graph query capabilities for some time, but PostgreSQL 19 is set to go further, ...

PostgreSQL vulnerability CVE-2026-6471 allows low-privileged attackers to execute code, gain PostgreSQL superuser access and ...

All-in-One WP Migration plugin vulnerability CVE-2026-19949 lets attackers plant hidden SQL payloads via WordPress trackbacks; the injected code fires the moment a site admin runs a routine backup, ...

WordPress backup plugin vulnerability CVE-2026-19949 in All-in-One WP Migration exposes 3.25 million unpatched sites to ...

Sangoma Switchvox faces an actively exploited critical flaw enabling unauthenticated remote command execution.

Threat actors are actively attempting to exploit CVE-2026-9586, a critical unauthenticated SQL injection vulnerability in ...

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution.

The vulnerability, a severe SQL injection flaw with a CVSS score of 9.3, affects Sangoma Switchvox SMB Edition 8.3 (104997).