#WWDC26 hashmoji now live on X ahead of next week’s keynote
As it has done over the past several years, Apple has kicked off its hashmoji campaign on X for posts containing the #WWDC26 hashtag. more…

Read more »

WWDC 2026 guests can attend special screening of the latest 'Star Wars' movie
Those lucky enough to attend WWDC in person will now have the chance to watch 'The Mandalorian and Grogu' at the Steve Jobs Theater.'The Mandalorian and Grogu' will be screened at WWDC 2026. Image Credit: Lucasfilm.While iOS 27 and a revamped Siri will be the highlight of Apple's annual developer conference, it looks like the Apple Vision Pro will get some praise during the event as well.Jon Favreau, director of The Mandalorian and Grogu, spoke in April 2026 about using the Apple headset to better frame IMAX shots while also cutting costs. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

9to5Mac Daily: June 1, 2026 – Apple TV and AI glasses rumors
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by CardPointers: The best way to maximize your credit card rewards. 9to5Mac Daily listeners can exclusively save 30% and get a $100 Savings Card.   more…

Read more »

WhatsApp working to bring Liquid Glass to its Mac app
After rolling out its Liquid Glass redesign more broadly to iOS users last month, Meta is now moving to take the revamped look to its Mac app. Here are the details. more…

Read more »

iOS 26.5.1 update fixes charging problem with Phone 17 and iPhone Air
The latest iOS 26.5.1 update fixes a charging problem users with iPhone 17 and iPhone Air handsets face when batteries get low. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Block ads and data trackers forever with this top-rated service
Snag a lifetime subscription to the AdGuard family plan. The iOS and Mac ad blocker also protects your privacy on Android and PC. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Singapore court denies xAI’s requests for documents in lawsuit against Apple and OpenAI
Singapore has rejected xAI’s requests for documents from local companies as part of Elon Musk’s lawsuit against Apple and OpenAI. Here are the details. more…

Read more »

Zoë Kravitz set to star in untitled Apple TV original movie from Megan Park
Apple TV has announced that Zoë Kravitz will star in a new untitled original movie directed by Megan Park. The news comes directly from… The post appeared first on MacDailyNews.

Read more »

macOS 26 Tahoe Guide: macOS 26.5.1 update now available
Macworld Like its counterparts on the other Apple devices, in September 2025 macOS got a brand new look along with a new name: macOS 26. Because Apple is aligning the names of all the operating systems this year, the new version of macOS is called macOS 26 rather than macOS 16. It also takes the name Tahoe, inspired by the lake, beaches, and the ski resorts of that area of California.  Along with a big redesign, macOS 26 brings new Continuity features to bring your iPad, iPhone, and Mac even closer together, a brand new Phone app, and more. Spotlight also gets its biggest ever update with the ability to action things like sending emails directly from Spotlight.  Those with compatible Macs have been able to install macOS Tahoe since it was released on September 15, 2025. If you haven’t yet, read on to find out how to do so, whether you can, and whether you should. macOS Tahoe might have launched, but Apple is continuing development with new features being added every couple of months–the latest update being macOS 26.5.1. You can get a first look at the new upcoming features via Apple’s developer and public betas, which are available to download if you join the beta program (we explain how to do so below). You will find all the things you need to know about macOS Tahoe and all its new features below, including which Macs are compatible with macOS 26 and the new features you can expect, including what’s been added since the September launch, and what’s coming in the next update. Stay tuned to this superguide for everything you need to know about macOS 26 Tahoe. macOS 26 Tahoe: Summary The new version of macOS, called macOS 26 Tahoe, was released on September 15 2025. The latest version–macOS 26.5.1–arrived on June 1, 2026. macOS 26 Tahoe is still being developed and you can access new features before they are launched via the Developer and Public Betas. Tahoe runs on Macs released since 2019. macOS 26 Tahoe runs on all M-series Macs, but it runs on a small number of Intel-powered models. Apple has confirmed that macOS Tahoe will be the last macOS version to support Intel-powered Macs; from macOS 27 Intel Macs will not be supported. With its new Liquid Glass interface, macOS 26 has its biggest design change since 2013. New features in macOS Tahoe include more options for personalization, improvements to Spotlight and Shortcuts app, and the introduction of a Phone app on the Mac and all the associated features. What is the latest version of macOS 26 Tahoe? Latest version of macOS is macOS Tahoe 26.5.1, which arrived on June 1, 2026 Apple released the first version of macOS 26 Tahoe on September 15, 2025. The release coincided with the iOS 26 update. Since then the following updates to Tahoe have been issued by Apple: macOS 26 – September 15, 2025 macOS 26.0.1 – September 29, 2025 (bug fixes) macOS 26.1 – November 3, 2025 macOS 26.2 – December 12, 2025 macOS 26.3 – February 11, 2026 macOS 25.3.1 – March 4, 2026 macOS 26.4 – March 24, 2026 macOS 26.4.1 – April 9, 2026 macOS 26.5 – May 11, 2026 macOS 26.5.1 – June 1, 2026 Wondering whether to install macOS Tahoe? Read: macOS Tahoe vs macOS Sequoia: What’s different, what’s new, and should you update? What’s coming in the next version of macOS? macOS 26.6 – release date tbc macOS Tahoe 26.5 has now been released so Apple will start work on the next beta of macOS 26. Version 6. On June 8, Apple will hold its WWDC event at which the company will reveal news about what’s coming in macOS 27 later in 2026. The macOS 26.6 update is unlikely to arrive before the WWDC Keynote. With Apple already working on the next update to macOS, we are less likely to see new features for macOS 26. Future updates to macOS 26 are more likely to relate to bug fixes and security updates, unless Apple needs to release new features for compatibility with upcoming new products. Apple runs a developer beta as well as a public beta so that upcoming new features can be tested. Both betas are free, though the developer beta requires a free registration as a developer. Apple issues updates to the betas fairly regularly. The public beta updates tend to come a day or two after the updated developer beta. If you are interested in trying out the beta, you can join Apple’s beta program. For help installing the macOS beta, see our guide to installing the macOS beta. New features that have arrived in macOS 26 Tahoe since launch Development continues even after the official macOS update is released, as Apple seeks to introduce new features that missed the initial introduction date. Below you can see all the new macOS features that have arrived with each iteration of macOS 26 since it’s initial launch in September 2025. New features in macOS 26.5.1 The macOS 26.5.1 update contains a bug fix. According to the release notes, “This update addresses an issue for enterprise users where Macs with an M5 chip could unexpectedly shut down when using certain content filtering network extensions.” No new features are included in the update. New features in macOS 26.5 With macOS 26.5, Apple added a new option for desktop Mac owners who think it’s too difficult to reach their Mac’s power button. A new option labeled “Start up when power is connected” now appears in the Energy section of System Settings for the Mac mini, iMac, and Mac Studio. An Apple support document explains that “Your Mac will now automatically turn on whenever you connect it to power, such as when plugging it into a power outlet or restoring power using an external power switch.” This should be helpful for those who find the on switch awkward to reach on the Mac mini. Apple also included several features that are also in iOS 26.5 and iPadOS 26.5: Maps now has Suggested Places and ads Power control setting in Energy for Mac mini, Mac Studio, and iMac enables you to power off or restart your Mac using assistive accessories like switches RCS end-to-en encryption Bug fixes and security enhancement New features in macOS 26.4.1 macOS 26.4 is specific to the M5 MacBook Air and the M5 Pro and M5 Max MacBook Pros released in March 2026. It fixes an issue that can occur when using content filter extensions and connecting to a Wi-Fi network on those machines. New features in macOS 26.4 Battery management feature: A manual battery charge limit for MacBooks. This is a feature previously exclusive to iPhones that allows users to cap their battery charge at 80 percent, 100 percent, or any five-percent increment in between to reduce long-term wear and tear. Terminal warning: A new Terminal paste warning alerts users who paste in suspicious commands that scammers encourage pasting text into Terminal. Apple Music “Playlist Playground”: A new feature that uses Apple Intelligence to generate or edit playlists based on text prompts or a selection of songs. Writing Tools and Summaries: Continued integration of system-wide AI tools for proofreading and summarizing text. Apple Podcasts update: A new video podcast experience that utilizes HTTP Live Streaming (HLS) to allow users to switch seamlessly between watching and listening to shows. Apple Music update: The interface for albums and playlists has been updated so that the background color dynamically matches the album artwork. Freeform: The whiteboarding app has received a “Creator Studio” update, which includes new features and a refreshed app icon. Advanced Fingerprinting Protection: macOS 26.4 includes critical security patches and expands on privacy features like Advanced Fingerprinting Protection. Stolen Device Protection: This a feature, first seen on iPhone, is expected to be enabled by default starting with this release. Eight new emoji: Ballet Dancer, Distorted Face, Fight Cloud, Hairy Creature (Bigfoot), Landslide, Orca, Treasure Chest, and Trombone Rosetta 2 warnings: Support for the transition layer for Intel-based apps will end with macOS 27. New features in macOS 26.3.1 External Display Support: macOS 26.3.1 adds support for the 2026 models of the Studio Display and Studio Display XDR. If you’re planning on investing in a Studio Display, you’ll need to install this update, according to the release notes. It also includes security patches and bug fixes. Apple New features in macOS 26.3 This update continues the refinement of the major features introduced with the initial launch of macOS 26 Tahoe. In iOS 26.3 there were a number of EU-mandated changes. It is also optimized for the M5 Pro and M5 Max chips, which are due to launch. Read our iOS 26 guide for more information. New features in macOS 26.2 macOS Tahoe 26.2, released in late 2025, introduced several specialized updates focusing on video conferencing enhancements, AI development tools, and hardware-specific performance boosts. While it was not considered a massive overhaul, it brought a few “genius” utility features that improved the daily user experience, particularly for those working in remote or low-light environments. Edge Light: The most prominent consumer-facing feature in macOS 26.2 is Edge Light, a virtual ring light designed to improve webcam image quality. It places a bright white border around the display to mimic a selfie ring light, significantly improving visibility in dark rooms. It uses the Neural Engine to detect the user’s face for appropriate light adjustment and can even detect the cursor to hide the light when it might interfere with navigation. Users can adjust the intensity of the light and choose between warmer or cooler color temperatures. It requires an M-series Mac, but on M4 Macs and later, the feature can be set to enable automatically when low light is detected . AI and Developer Enhancements: For developers and power users, macOS 26.2 introduced significant updates to machine learning frameworks and hardware clustering. Developers using the open-source MLX framework can now leverage the Neural Accelerator in the M5 chip. The update enhanced the ability to create AI clusters using the Mac Studio’s Thunderbolt 5 connectivity. Security Updates: Critical patches for vulnerabilities, aligning with security fixes found in iPadOS 26.2. Interface Polish: Continued refinement of the “Liquid Glass” UI, which introduced more translucency and visionOS-style effects across the system. Performance: General “under-the-hood” changes to improve system stability and responsiveness . New features in macOS 26.1 The macOS 26.1 update includes fixes for problems with games controllers and some other issues. There are a lot more changes coming to iPhones with iOS 26.1. New features in macOS 26.1 include: Liquid Glass: Ability to tone down Liquid Glass effect. Choose between clear and tinted look for increased opacity. AutoMix support for Apple Music over AirPlay. FaceTime audio improvements over low-bandwidth. Regional Communication Safety and Web content filters for adult websites. Icons: Changes to the Macintosh HD icon. New TV app icon with Apple TV+ rebranded to Apple TV. A new Results from Clipboard setting for Spotlight, where the user can turn on/off Spotlight’s ability to search and display clipboard items. Users can also set an expiration time for the clipboard and clear the Clipboard history. (Settings > Spotlight > Results from Clipboard.) macOS Tahoe 26.1 has a new Spotlight setting for Clipboard management.Foundry macOS 26 Tahoe problems & fixes YouTube / Apple Some M3 Ultra Mac Studio users have reported that they are unable to install macOS Tahoe. It seems the problematic Mac Studios already had Sequoia 15.7 installed, and during the attempted installation, Tahoe would look for a driver, and when it failed to find it, it resulted in a failed installation. The macOS 26.0.1 update addresses the initial bugs, including the Mac Studio installation bug. macOS 26 Tahoe supported devices: Which Macs get macOS Tahoe Requires M-series chip or Intel-based Mac computers with a T2 Security Chip Apple Intelligence features require M1 or later No Intel support from macOS 27 onwards When Apple updates the operating system for its devices, it sometimes means that certain models are no longer supported. The good news is that Macs that ran macOS Sonoma will be able to run the new macOS. Apple states that the base requirement includes Macs with M-series chips and Intel-based Mac computers with a T2 security chip. Here are Macs with Apple Silicon that will be able to run macOS Tahoe: MacBook Air (M1/2020 and later) MacBook Pro (M1/2020 and later) iMac (M1/2021 and later) Mac mini (M1/2020 and later) Mac Studio (M1/2022 and later) Mac Pro (M2/2023 and later) There are four Intel-powered Macs able to run macOS Tahoe. These models won’t support Apple Intelligence features: MacBook Pro (16‑inch, Intel/2019) MacBook Pro (13‑inch, Intel/2020, Four Thunderbolt 3 ports) iMac (Intel/mid 2020) Mac Pro (Intel/2019) Apple confirmed that this is the last version of macOS that will run on Intel Macs.  What were the biggest changes in macOS 26 Tahoe macOS 26 Tahoe represents one of the most significant overhauls to Apple’s desktop operating system in over a decade. The update is characterized by a dramatic visual redesign, the introduction of core mobile apps to the Mac, and a complete rethinking of system-wide tools like Spotlight. We’ll run through each new feature in detail below, including the Liquid Glass redesign, Spotlight overhaul, new apps, new iPhone features that are coming to the Mac and more… macOS 26 Tahoe design: Liquid Glass and other interface changes  Apple At WWDC in June, Apple showed off some enticing new features for macOS that will be coming later in 2025. A number of new features and interface enhancements were promised, but one of the biggest changes is coming to all of Apple’s products: a new design based on a graphical user interface that Apple is calling Liquid Glass. Apple showed off the brand new look for macOS in the WWDC keynote. As with Apple’s other operating systems, macOS Tahoe uses Apple’s new Liquid Glass effect to create reflective, glossy elements around the interface. The Liquid Glass elements will change color to reflect the content beneath as you scroll and will dynamically react. Buttons appear more curved and less flat. You’ll see the effect in the Dock, sidebars, toolbars, and elsewhere. The menu bar is fully transparent, and you can adjust the transparency of icons in the Dock, for example. If you don’t like the new transparent look or if it affects how well you can see items, there is a way to reduce it, and in some instances, turn it in off altogether. Read: How to reduce transparency in macOS Tahoe. This is the first time in years that Apple has made significant changes to the visual style of macOS, and it certainly makes the OS appear more modern. @macworld.com Top 3 features in macOS Tahoe from WWDC #wwdc #macostahoe #fyp ♬ original sound – Macworld – Macworld macOS Tahoe interface changes  Apple Apple says the design overhaul will elevate the key elements of macOS and enhance the macOS experience. The cleaner design is intended to help the user to focus on their content rather than other distractions, while elements like the translucent menu bar will make the screen feel larger.  Users will be able to choose to add third-party apps to the menu bar and even drag widgets and buttons from the Control Centre into the menu bar, thanks to a customizable layout, similar to iOS 18. Users will also be able to add controls for their favorite apps to the Control Centre. We have a guide to how to use Control Centre in macOS Tahoe where you can read about how to add controls, remove the ones you don’t want, and arrange them in a way that makes sense for you. Apple is taking advantage of the Liquid Glass introduction to bring some new icon designs to the Mac as well to help give macOS a fresh look. Some of the icons look drastically different, for others the changes are more subtle. The ‘hard drive’ icon will now be replaced with one that looks more like an SSD, for example. The new icons tend to take the form of ‘squircles’. The changes may make some third party icons less recognisable. Take a look at: 21 of the new macOS Tahoe icons with new designs for the Finder, Automator, Calendar and Contacts icons among others. You can change the icons if you want, read: How to change the icon of a macOS storage device. The new Finder icon.Apple macOS will also gain a feature that arrived on the iPhone and iPad with iOS 18: tinted and dark app icons. Users will be able to personalize their Mac in other ways, too, such as changing the color of folders and adding emoji or symbols to help them identify folders. Users can also pick personalised wallpapers and choose theme colors. If you want to change your folder color read: How to change folder color and add icons in Tahoe. New dynamic screensavers will be included. One, based on the default macOS Tahoe wallpaper, depicts the landscapes of South Lake Tahoe in a stylized artistic manner, is available in both light and dark versions. See how it looks in Tahoe’s gorgeous new screen saver. There are up to 15 other new screensavers with images of Tahoe at various time of the day, Himalayas, Goa, The Ganges and more. macOS Tahoe Spotlight overhaul Apple Spotlight has always been much more than a search tool built into macOS, helping users find anything on their Macs, make calculations and conversions, and more. In macOS Tahoe, Spotlight will be able to do even more. Spotlight’s design and functionality have been completely rethought for macOS 26, with changes that will help Mac users get things done faster. Rather than being a single bar, on the right-hand side of the new Spotlight search box, you will find icons for things like apps, files, Shortcuts, Actions, and clipboard. Select one of these buttons, and Spotlight’s box expands to house relevant items in an easy-to-browse view. When you search for something, you’ll see relevant filters under your search terms – click one to quickly apply it. Not only will Spotlight be the easiest way to find anything on your Mac, but in macOS 26, Spotlight will be contextually aware so it can make suggestions based on what you are doing. Search results will be listed based on their relevance to you, and it will be possible to use new filtering options for more specific search results.  Spotlight will also have the ability to perform actions that normally require you to be inside an app. For example, you will be able to create a calendar event, begin an audio recording, or play a podcast from within Spotlight. It will even let you fill out parameters for actions, such as typing out an email message and filling in the recipient and subject. You can essentially compose an email from inside Spotlight, without opening your email app. This will be simplified further with Quick Keys, with which you will be able to type a short string of letters to launch an action, such as typing “sm” to start sending a message to a friend. An App Intents API will make it possible for third-party developers to add Spotlight shortcuts for their applications. One of the most exciting new arrivals in Spotlight is Clipboard History, something we have wanted for years. Instead of being limited to pasting the last copied item, you will be able to view previous text and photos you’ve copied and re-insert them as needed. Why did it take Apple so long to offer this? Apple Tied to the new Spotlight is the new Apps app, which replaces Launchpad, which has been a feature of Macs for more than a decade and provides users with a Home page like view of all their apps. Instead Spotlight will be the means of finding apps. This will take some adjustment, especially if you were a Launchpad user. Learn more about Apps replacing Launchpad, and if you want to get Launchpad back we have a tutorial to show you how. macOS 26 Tahoe: New and updated apps  There are also lots of updates coming to Apple apps that are included with iPads, iPhones, and Macs. Many of the changes are shared across all the new apps, but there are a number of Mac-specific updates coming.  Phone app A Phone app on the Mac is the latest Continuity feature to come to macOS. Continuity is Apple’s name for the features that work seamlessly between Macs, iPad and iPhones, these include Handoff (which enables you to start a task on one device and switch to another to finish it), Universal Clipboard (which allows you to copy something on one device and paste it on another), and Universal Control (where you can use one mouse and keyboard to interface with more than one Mac), among other features.  With the new Phone app, users will be able to receive their calls and voicemail on the Mac. The Phone app is getting some new features of its own, including Call Screening, which is designed to help you avoid spam calls, and Hold Assist, which means you will never have to listen to hold music again. With Call Screening, before a call is put through, an unknown caller will have to share their name and reason for calling, and you will then be provided with that information. With Hold Assist, when you join a queue to wait for a call operator and the hold music starts, you can choose to be called back.  YouTube / Apple Live Activities Another feature that demonstrates the interoperability between the iPhone and Mac is Live Activities. In iOS 18, you can see a live update on your Lock Screen relating to things like a takeaway order. Live Activities show the process of a food delivery driver, for example. Now, that functionality is coming to the Mac. It will be powered by the iPhone Mirroring function, and will take the form of an iPhone-style widget that you will see on the screen of your Mac. Games app The Games app is another one that is available across all three main operating system updates: iOS, iPadOS, and macOS. As with the iOS Games app, the Games app on the Mac will bring together all the games you have on your Mac (bought from the App Store, Apple Arcade and elsewhere), as well as your friends list, achievements, and leaderboards. Tabs will make it easy to find the games you and your friends are playing. A new Game Overlay will make it easy to adjust settings for a particular game. You’ll also be able to chat with friends and ask them to play. @macworld.com New Mac gaming features just dropped! #wwdc25 #gaming #apple #fyp ♬ original sound – Macworld – Macworld There is also a new Low Power Mode coming, which gamers will be able to turn on to maximise battery life when playing games.  And in related news, Metal 4 is coming, which will enable next-gen features for Mac game developers, such as MetalFX Frame Interpolation and MetalFX De-noising.  Apple Shortcuts  Apple The Shortcuts app is getting an overhaul in macOS Tahoe. Shortcuts is a tool for automating tasks and repetitive actions. For those with more specific needs, there is also Automator on the Mac, but Shortcuts is simple to use and available on iPhone and iPad as well. In Tahoe, Shortcuts will be able to run workflows based on factors like time of day, or in response to an email from a specific person arriving. This functionality was previously limited to the iPhone and iPad versions. There are new intelligent actions available that can be used to create Smart Shortcuts. Apple Intelligence and ChatGPT can be used to enhance these Shortcuts. Apple says that “Users will see dedicated actions for features like summarizing text with Writing Tools or creating images with Image Playground.” Live Translation  One of the most useful new features announced at WWDC is Live Translation. With Live Translation, you can text a friend who speaks a different language and have the translations appear in real time, or get instant translations during a phone call or FaceTime conference. Everyone gets their own translator.  You’ll be able to take advantage of Live Translation in the Phone app, Messages, and FaceTime on your Mac. Apple Journal The Journal app, which arrived on iOS in 2023, is coming to the Mac (and iPad). Terminal Terminal is getting a colorful redesign and the Liquid Glass treatment, with support for 24-bit color and the ability to use Powerline fonts. Reminders Reminders is getting some help from Apple Intelligence. Reminders will scan a website, note, email or other content, then decide the most relevant action items for you based on its findings. You’ll be able to use Apple Intelligence to automatically categorize your reminders into sections, making them easier to find There are also changes coming to Safari, Messages, Photos, FaceTime, and Notes. 

Read more »

Samsung’s new monitors offer features Apple still doesn’t
Samsung’s new monitors fix some of the biggest complaints Mac users have had for years. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

iOS 27 could make it way easier to split the bill
Looks like a very convenient bill-splitting tool is coming to iOS 27. Should make those awkward group purchases like dinners a lot easier. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple TV ranks higher than Netflix in new ‘quality’ ranking
Research firm MoffetNathanson has developed a new quality index for streaming services, and Apple TV beat out Netflix in the very first rankings. more…

Read more »

Apple TV ranks higher than Netflix in new ‘quality’ ranking
Research firm MoffetNathanson has developed a new quality index for streaming services, and Apple TV beat out Netflix in the very first rankings. more…

Read more »

Katey Sagal joins Elizabeth Banks, Ted Danson in untitled Apple TV comedy series
Katey Sagal has joined the cast of the untitled Apple TV comedy series from Liz Heldens and Matt Ward. The new series… The post appeared first on MacDailyNews.

Read more »

Agenda 23
Date-focused note-taking app adds a new Safari Web clipper extension. ($Free or $34.99 annual subscription for Premium features, free update, 64.9 MB, macOS 10.14+)

Read more »

Mimestream 1.10
Turns on Private Push feature by default for those running macOS 26 Tahoe and later. ($49.99 new, free update, 12.6 MB, macOS 12+)

Read more »

Piezo 1.9.9
Maintenance update for the “charmingly simple” audio recording tool. ($29 new, free update, 12.8 MB, macOS 14.4+)

Read more »

Zoë Kravitz to star in upcoming untitled Apple TV movie
Apple TV confirmed today that Zoë Kravitz (Mad Max: Fury Road) is returning to the streaming platform for a new project, following her appearances in The Studio. Here are the details. more…

Read more »

iOS 26.5.1 Fixes Charging Bug, macOS 26.5.1 Tackles Shutdown Issue
iPhone 17 and iPhone Air owners should update to iOS 26.5.1 promptly—it fixes a bug that blocks USB charging when the battery is nearly dead. macOS 26.5.1 addresses an enterprise-only shutdown issue.

Read more »

New folding iPhone rumors: Leaked image, color hints and a vapor cooling chamber
New leaks point to a folding iPhone image, color hints and a vapor cooling chamber. With months to go before release, speculation builds. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Read more »

Apple Card users can earn up to $30 in Uber Cash through Uber Eats
Apple Card users who subscribe to Uber One can now earn up to $30 in Uber Cash on eligible Uber Eats grocery and retail purchases. Here's how to get it.Apple PayThe promotion provides up to $30 in Uber Cash through August 31. Uber One members can earn $10 on one qualifying order each month in June, July, and August when they pay with Apple Card in the Uber Eats app.Eligible purchases include groceries, health and beauty products, pet supplies, and other retail items available through Uber Eats. Uber Cash earned through the promotion can be used on future Uber Eats orders.The promotion expands the benefits available to Apple Card users who regularly use Uber's services. Customers who already subscribe to Uber One and place grocery or retail orders through Uber Eats can combine the monthly Uber Cash bonus with the card's existing rewards. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple preps smart bill-splitting in Apple Cash for iOS 27 and watchOS 27: Snap a receipt photo and let AI handle the math
Apple is set to make splitting group bills easier than ever with a major new feature coming to Apple Cash in iOS 27 and watchOS 27… The post appeared first on MacDailyNews.

Read more »

Apple just issued critical updates for iPhone 17 and M5 Macs
Macworld With WWDC just a week away, Apple is still working on perfecting iOS 26 and macOS 26. With the beta for 26.6 in testing, Apple has has just released a small point release to target critical bugs in its latest hardware. iOS 26.5.1 fixes a charging bug that impacts only iPhone 17 and iPhone Air, while macOS 26.5.1 addresses a shutdown bug on Macs with M5 processors that primarily impacts enterprise users. The release notes for iOS 26.5.1 state: “This update addresses an issue for a small number of users that may prevent wired charging on iPhone Air and iPhone 17 models when the battery is nearly drained.” The release notes for macOS 26.5.1 state: “This update addresses an issue for enterprise users where Mac computers with an M5 chip could unexpectedly shut down when using certain content-filtering network extensions.” If you have a new iPhone or Mac, it’s best to update now, even if you haven’t noticed any issues with these specific bugs. Here’s how: To update your iPhone to iOS 26.5.1 Open Settings Tap General Tap Software Update and follow the on-screen instructions. To update your Mac to macOS 26.5.1 Open System Settings Click General in the left-hand column Click Software Update on the right side, and follow the on-screen instructions.

Read more »

iOS 27's bill-splitting feature will help you claw back money from your friends
An upcoming iOS 27 feature will help users split the bill with others, all by taking a photograph of a receipt with their iPhone.Apple Wallet will let you split the bill with others in iOS 27One of the constant problems of having a social life is splitting the bill at the end of a meal. While one person often pays with others promising to pay them back, Apple wants to make it easier to get that money from your friends.In one of the few feature updates arriving in iOS 27 during WWDC week, Bloomberg was told by people familiar with the plans that the feature will help users quickly divide a bill up. After photographing the receipt, a user can then assign items to different contacts, and send a payment request. Rumor Score: 🤯 Likely Continue Reading on AppleInsider | Discuss on our Forums

Read more »

MagSafe Monday: Why the PISEN 5000mAh battery pack is great for everyday carry
I have owned and used dozens of higher-capacity battery packs over the years, but sometimes you just need something small to get you through a single day of heavy use. Think of it like a “top off.” If you are heading out for an afternoon away from the office or jumping on a flight, you do not always want to carry a heavy brick. The PISEN 5000mAh wireless power bank is a super lightweight magnetic charger that fits into a minimal everyday carry setup. more…

Read more »

Apple teases ‘All systems glow’ for WWDC as livestream link debuts on YouTube
Apple has published the YouTube livestream link for next week’s WWDC keynote and is teasing a new ‘All systems glow’ tagline. more…

Read more »

New Apple Card promo offers limited-time Uber Cash bonus
A new Apple Card promo kicking off today offers bonus Uber Cash rewards on eligible purchases. more…

Read more »

Unexpected M5 Mac shutdowns get a fix in macOS Tahoe 26.5.1
Apple has released macOS Tahoe 26.5.1, fixing a bug that could cause some M5 Macs using content-filtering network extensions to shut down unexpectedly.MacBook Air with M5 chipThe maintenance update targets a problem affecting software commonly used in managed environments. Organizations use content-filtering network extensions to monitor and secure network traffic on company-owned devices.Apple didn't disclose how many users were affected. Issues involving managed deployments can create significant support challenges when they affect large numbers of systems across an organization. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Unexpected M5 Mac shutdowns get a fix in macOS Tahoe 26.5.1
Apple has released macOS Tahoe 26.5.1, fixing a bug that could cause some M5 Macs using content-filtering network extensions to shut down unexpectedly.MacBook Air with M5 chipThe maintenance update targets a problem affecting software commonly used in managed environments. Organizations use content-filtering network extensions to monitor and secure network traffic on company-owned devices.Apple didn't disclose how many users were affected. Issues involving managed deployments can create significant support challenges when they affect large numbers of systems across an organization. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Unexpected M5 Mac shutdowns get a fix in macOS Tahoe 26.5.1
Apple has released macOS Tahoe 26.5.1, fixing a bug that could cause some M5 Macs using content-filtering network extensions to shut down unexpectedly.MacBook Air with M5 chipThe maintenance update targets a problem affecting software commonly used in managed environments. Organizations use content-filtering network extensions to monitor and secure network traffic on company-owned devices.Apple didn't disclose how many users were affected. Issues involving managed deployments can create significant support challenges when they affect large numbers of systems across an organization. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta's "AI support assistant" bot into resetting account passwords.

Read more »

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus of a 2025 KrebsOnSecurity story about how their hosting companies had assumed control over the technical infrastructure of Stark Industries Solutions, an Internet service provider sanctioned last year by the EU as a frequent staging ground for cyber mischief from Russia's intelligence agencies.

Read more »

Lawmakers Demand Answers as CISA Tries to Contain Data Leak
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials.

Read more »

Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of massive distributed denial-of-service (DDoS) attacks over the past six months. KrebsOnSecurity publicly named the suspect in February 2026 after the accused launched a volley of DDoS, doxing and swatting campaigns against this author and a security researcher. He now faces criminal hacking charges in both Canada and the United States.

Read more »

CISA Admin Leaked AWS GovCloud Keys on Github
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history.

Read more »

Patch Tuesday, May 2026 Edition
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers -- including Apple, Google, Microsoft, Mozilla and Oracle -- fixing near record volumes of security bugs, and/or quickening the tempo of their patch releases.

Read more »

Canvas Breach Disrupts Schools & Colleges Nationwide
An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group defaced the service's login page with a ransom demand that threatened to leak data from 275 million students and faculty across nearly 9,000 educational institutions.

Read more »

Vulnerability Summary for the Week of April 27, 2026
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info n/a-- OVMS3 3.3.005 Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted GVRET frames. 2026-05-01 10 CVE-2026-37541 https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381  tendacn[.]com-- W308R Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS servers and redirect user traffic to malicious sites. 2026-04-29 9.8 CVE-2018-25316 ExploitDB-44373VulnCheck Advisory: Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change  tendacn[.]com--W3002R Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin language cookie to change primary and secondary DNS servers, redirecting user traffic to malicious DNS servers. 2026-04-29 9.8 CVE-2018-25317 ExploitDB-44380VulnCheck Advisory: Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change  tendacn[.]com--FH303/A300 Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites. 2026-04-29 9.8 CVE-2018-25318 ExploitDB-44381VulnCheck Advisory: Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change  Weaver Network Co., Ltd.--E-office Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types. Attackers can upload PHP webshells to the Document directory and execute them via HTTP GET requests to achieve remote code execution as the web server user. Exploitation evidence was first observed by the Shadowserver Foundation on 2022-10-10 (UTC). 2026-04-30 9.8 CVE-2022-50993 https://service.e-office.cn/knowledge/detail/5https://cn-sec.com/archives/1453025.htmlhttps://bbs.chaitin.cn/topic/37https://www.vulncheck.com/advisories/weaver-e-office-10-0-20221201-unauthenticated-arbitrary-file-read-via-xmlrpcservlet  synway[.]net-- SMG Gateway Management Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and interpolated directly into a sed command without sanitization. An unauthenticated remote attacker can inject arbitrary shell commands by submitting a POST request with crafted radius_address, radius_address2, shared_secret2, source_ip, timeout, or retry parameters along with save=1 and enable_radius=1 to achieve remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-07-11 (UTC). 2026-04-30 9.8 CVE-2025-71284 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/synway/synwaysmg-radius-rce.yamlhttps://mrxn.net/jswz/synway-9-2radius-rce.htmlhttps://mp.weixin.qq.com/s/PyepoFSuQ63E3RnpQa9nsAhttps://www.synway.net/https://www.vulncheck.com/advisories/synway-smg-gateway-management-software-os-command-injection-via-radius-address  Directorist Booking--Directorist Booking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2. 2026-04-27 9.3 CVE-2026-22336 https://patchstack.com/database/wordpress/plugin/directorist-booking/vulnerability/wordpress-directorist-booking-plugin-2-4-1-sql-injection-vulnerability?_s_id=cve  Directorist--Directorist Social Login Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4. 2026-04-27 9.8 CVE-2026-22337 https://patchstack.com/database/wordpress/plugin/directorist-social-login/vulnerability/wordpress-directorist-social-login-plugin-2-1-1-privilege-escalation-vulnerability?_s_id=cve  Milesight--MS-Cxx63-PD Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys. 2026-04-27 9.8 CVE-2026-32644 https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.jsonhttps://www.milesight.com/support/download/firmware  n/a--Automotive Grade Linux (AGL) AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget installation flow. The is_valid_filename function in wgtpkg-zip.c validates ZIP entry names but does not check for dot notation directory traversal sequences it only blocks absolute paths. The zread extraction function uses openat(workdirfd, filename, O_CREAT) which resolves dot notation values relative to the work directory, allowing files to be written anywhere on the filesystem. Critically, in function install_widget in file wgtpkg-install.c, extraction via zread occurs BEFORE signature verification via check_all_signatures. Even if signature verification fails, the error cleanup (remove_workdir) only deletes the temporary work directory files written outside via path traversal persist permanently. 2026-05-01 9.8 CVE-2026-37531 https://gerrit.automotivelinux.org/gerrit/src/app-framework-mainhttps://gist.github.com/sgInnora/8526eedcfd826d05ef1fc45d8f405643  n/a-- cannelloni v2.0.0 Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in function decodeFrame allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted CAN FD frames. 2026-05-01 9.8 CVE-2026-37539 https://github.com/mguentner/cannellonihttps://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381  Carlson Software--VASCO-B GNSS Receiver The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needing credentials. 2026-04-28 9.4 CVE-2026-3893 https://www.carlsonsw.com/support-and-training/https://www.cve.org/CVERecord?id=CVE-2026-3893https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-02.json  Mersenne--Prime95 Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling (SEH) mechanisms. Attackers can inject malicious payload through the optional proxy hostname field in the PrimeNet connection settings to trigger the overflow and execute system commands. 2026-04-29 8.4 CVE-2018-25299 ExploitDB-44649Official Product HomepageProduct ReferenceVulnCheck Advisory: Prime95 29.4b8 Local Buffer Overflow via SEH  xataboost--XATABoost CMS XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id parameter. Attackers can send GET requests to news.php with malicious id values to extract sensitive database information. 2026-04-29 8.2 CVE-2018-25300 ExploitDB-44622Official Product HomepageVulnCheck Advisory: XATABoost CMS 1.0.0 SQL Injection via news.php  Easy MPEG--Easy MPEG to DVD Burner Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious username string. Attackers can craft a payload containing junk data, SEH chain pointers, and shellcode that overwrites the SEH handler to redirect execution and run arbitrary commands like opening calc.exe. 2026-04-29 8.4 CVE-2018-25301 ExploitDB-44565Product ReferenceVulnCheck Advisory: Easy MPEG to DVD Burner 1.7.11 SEH Local Buffer Overflow  Alloksoft--Allok Video to DVD Burner Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the License Name field that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) overwrite. Attackers can craft a malicious input string with 780 bytes of junk data followed by SEH chain pointers and shellcode, then paste it into the License Name field during registration to achieve code execution. 2026-04-29 8.4 CVE-2018-25303 ExploitDB-44518Official Product HomepageVulnCheck Advisory: Allok Video to DVD Burner 2.6.1217 Buffer Overflow SEH  Filehippo--Free Download Manager Free Download Manager 2.0 Built 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured exception handler (SEH) chain exploitation. Attackers can craft a malicious URL file that, when imported through the File > Import > Import lists of downloads menu, causes a buffer overflow in the Location header response that overwrites the SEH chain and executes arbitrary code. 2026-04-29 8.4 CVE-2018-25304 ExploitDB-44499Product ReferenceVulnCheck Advisory: Free Download Manager 2.0 Built 417 Local Buffer Overflow SEH  Sysgauge--SysGauge Pro SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute arbitrary code with application privileges. 2026-04-29 8.4 CVE-2018-25307 ExploitDB-44455VulnCheck Advisory: SysGauge Pro 4.6.12 Local Buffer Overflow SEH  donmik--Buddypress Xprofile Custom Fields Type BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters. Attackers can modify the field_hiddenfile and field_deleteimg parameters during profile editing to unlink files from the server. 2026-04-29 8.8 CVE-2018-25308 ExploitDB-44432Official Product HomepageVulnCheck Advisory: BuddyPress Xprofile Custom Fields Type 2.6.3 Remote Code Execution  Alloksoft--WMV to AVI MPEG DVD WMV Converter Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious input containing shellcode with structured exception handler (SEH) overwrite to bypass protections and execute code with application privileges. 2026-04-29 8.4 CVE-2018-25314 ExploitDB-44365Official Product HomepageProduct ReferenceVulnCheck Advisory: Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow  Alloksoft--Video Joiner Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Name field. Attackers can craft a payload with structured exception handler (SEH) overwrite and shellcode to achieve code execution when the application processes the license registration input. 2026-04-29 8.4 CVE-2018-25315 ExploitDB-44364Official Product HomepageProduct ReferenceVulnCheck Advisory: Alloksoft Video joiner 4.6.1217 Buffer Overflow via License Name  marketingfire--Widget Options Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets The Widget Options - Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using eval() on user-supplied Display Logic expressions with an insufficient blocklist/allowlist that can be bypassed using array_map with string concatenation, combined with a lack of authorization enforcement on the extended_widget_opts_block attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. The vulnerability was partially patched in version 4.2.0. 2026-05-02 8.8 CVE-2026-2052 https://www.wordfence.com/threat-intel/vulnerabilities/id/68023557-fc92-4cf6-96b4-405ff5a5fd5a?source=cvehttps://plugins.trac.wordpress.org/browser/widget-options/trunk/includes/widgets/gutenberg/gutenberg-toolbar.php#L843https://plugins.trac.wordpress.org/browser/widget-options/trunk/includes/extras.php#L495https://plugins.trac.wordpress.org/browser/widget-options/trunk/includes/extras.php#L534https://plugins.trac.wordpress.org/changeset/3481338/https://plugins.trac.wordpress.org/changeset/3514411/  Milesight--MS-Cxx63-PD An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras. 2026-04-27 8.8 CVE-2026-20766 https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.jsonhttps://www.milesight.com/support/download/firmware  wclovers--WCFM Frontend Manager for WooCommerce The WCFM - Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via the 'wcfm_delete_wcfm_customer' due to missing validation on the 'customerid' user controlled key. This makes it possible for authenticated attackers, with Vendor-level access and above, to delete arbitrary users, including Administrators. 2026-05-02 8.1 CVE-2026-2554 https://www.wordfence.com/threat-intel/vulnerabilities/id/21e397a4-0b32-4b13-a46b-c465acea0796?source=cvehttps://plugins.trac.wordpress.org/browser/wc-frontend-manager/tags/6.7.24/core/class-wcfm-customer.php#L386https://plugins.trac.wordpress.org/changeset/3483695/  opencats--OpenCATS OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers can break out of the define() string context in config.php using a single quote and statement separator to inject malicious PHP code that persists and executes on every subsequent page load when the installation wizard remains incomplete. 2026-04-28 8.1 CVE-2026-27760 https://chocapikk.com/posts/2026/opencats-installer-rce/https://github.com/opencats/OpenCATS/pull/706https://github.com/opencats/OpenCATS/commit/3002a29f4c3cada1aa2c4f3d4ae4e189906606b6https://github.com/opencats/OpenCATS/blob/46e4727/lib/CATSUtility.php#L142-L172https://github.com/opencats/OpenCATS/blob/46e4727/modules/install/ajax/ui.php#L130https://www.vulncheck.com/advisories/opencats-php-code-injection-via-installer-ajax-endpoint  Milesight--MS-Cxx63-PD Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials. 2026-04-27 8.8 CVE-2026-27785 https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.jsonhttps://www.milesight.com/support/download/firmware  Cockpit--Cockpit CMS Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collection management privileges to inject arbitrary PHP code into collection rules parameters. Attackers can inject malicious PHP code through rule parameters which is written directly to server-side PHP files and executed via include() to achieve arbitrary command execution on the underlying server. 2026-04-29 8.8 CVE-2026-34965 https://github.com/agentejo/cockpithttps://gist.github.com/thepiyushkumarshukla/64d2318518b17f529bc3ccb11fd5be90https://github.com/agentejo/cockpit/commits/494765e4f0fb9484f320aee0c6ee889b6fa789b9https://www.vulncheck.com/advisories/cockpit-cms-authenticated-remote-code-execution-via-collections  n/a--(UDS) & OBD-II (On Board Diagnostics for Vehicles) miaofng/uds-c commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a (2016-10-05) contains a stack buffer overflow in send_diagnostic_request. A 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) receives memcpy at offset 1+pid_length with payload_length bytes. MAX_UDS_REQUEST_PAYLOAD_LENGTH=7, so 1+2+7=10 exceeds buffer by 4 bytes. No bounds check on payload_length before memcpy. 2026-05-01 8.8 CVE-2026-37536 https://github.com/miaofng/uds-chttps://github.com/openxc/uds-chttps://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381  n/a--Open-SAE-J1939 (Daniel Martensson) collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Transfer handling. At line 23: uint8_t index = data[0] - 1. When data[0] (sequence number from CAN frame) is 0, index underflows to 255. Subsequent write at tp_dt- >data[255*7 + i-1] reaches offset 1791, exceeding the MAX_TP_DT buffer (1785 bytes) by 6 bytes. 2026-05-01 8.1 CVE-2026-37537 https://github.com/DanielMartensson/Open-SAE-J1939https://github.com/collin80/Open-SAE-J1939https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381  openampproject[.]org--OpenAMP v2025.10.0 OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems (STM32MP1, Zynq, i.MX), large values can cause the product to wrap around to a small value. 2026-05-01 8.4 CVE-2026-37540 https://github.com/OpenAMP/open-amphttps://github.com/OpenAMP/open-amp/blob/main/lib/remoteproc/elf_loader.chttps://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381  n/a--MixPHP Framework 2.x Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke TCP server (Server.php:87) receives data from a TCP socket, passes it directly to OpisClosureunserialize(), then executes the result via call_user_func(). No authentication or signature verification exists on the TCP connection. An attacker with access to the localhost TCP port (server binds 127.0.0.1) can send a crafted serialized PHP closure to achieve arbitrary code execution. 2026-05-01 8.4 CVE-2026-37552 https://github.com/mix-php/mixhttps://github.com/mix-php/mix/blob/v2.2.17/src/sync-invoke/src/Server.phphttps://gist.github.com/sgInnora/fa46386840fe978a30d7e53c458f2975  benjaminprojas--WP Editor The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2. This is due to missing nonce verification in the 'add_plugins_page' and 'add_themes_page' functions. This makes it possible for unauthenticated attackers to overwrite arbitrary plugin and theme PHP files with attacker-controlled code via a forged request, granted they can trick a site administrator into performing an action such as clicking a link. 2026-05-01 8.8 CVE-2026-3772 https://www.wordfence.com/threat-intel/vulnerabilities/id/b1bc4a87-d5de-4d66-9cc5-802ef11f886c?source=cvehttps://plugins.trac.wordpress.org/browser/wp-editor/trunk/classes/WPEditorPlugins.php#L60https://plugins.trac.wordpress.org/browser/wp-editor/trunk/classes/WPEditorThemes.php#L103https://plugins.trac.wordpress.org/changeset/3480577/  chartbrew--chartbrew Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew allows authenticated users with access to one project to update or delete a SharePolicy record that belongs to a different project. The affected routes authorize the caller against the project in the URL path, but they never verify that policy_id belongs to that project. This permits cross-project modification of dashboard sharing rules, including visibility, password requirements, allowed parameters, and expiration settings. This issue has been patched in version 5.0.0. 2026-04-30 8.1 CVE-2026-40600 https://github.com/chartbrew/chartbrew/security/advisories/GHSA-pq8h-2h99-39xmhttps://github.com/chartbrew/chartbrew/releases/tag/v5.0.0  TRENDnet--TEW-821DAP A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware of the component Firmware Udpate. The manipulation of the argument str leads to buffer overflow. The attack may be initiated remotely. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer. 2026-05-02 8.8 CVE-2026-7607 VDB-360564 | TRENDnet TEW-821DAP Firmware Udpate auto_update_firmware buffer overflowVDB-360564 | CTI Indicators (IOB, IOC, IOA)Submit #806214 | Trendnet TEW-821DAP v1.12B01 CWE-120 Buffer Copy without Checking Size of Inputhttps://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_BO.md  carazo--Import and export users and customers The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.8 via the `save_extra_user_profile_fields()` function. This is due to an incomplete blocklist that correctly restricts capability meta keys for the primary site (e.g., `wp_capabilities`, `wp_user_level`) but fails to block the equivalent meta keys for any other subsite in a WordPress Multisite network (e.g., `wp_2_capabilities`, `wp_2_user_level`), allowing these keys to pass the `in_array()` check and be written directly to user meta via `update_user_meta()`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator on any subsite within the Multisite network by submitting a crafted profile update to `/wp-admin/profile.php`. Exploitation requires that an administrator has previously imported a CSV file containing multisite-prefixed capability column headers and has enabled the 'Show fields in profile?' option, which causes those keys to be stored in the `acui_columns` option and exposed as editable fields on the user profile page. 2026-05-02 8.8 CVE-2026-7641 https://www.wordfence.com/threat-intel/vulnerabilities/id/368cff00-6a86-443e-aec4-4115a229a3c1?source=cvehttps://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/trunk/classes/columns.php#L221https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/tags/2.0.8/classes/columns.php#L221https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/trunk/classes/columns.php#L198https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/tags/2.0.8/classes/columns.php#L198https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/trunk/classes/helper.php#L150https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/tags/2.0.8/classes/helper.php#L150https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/trunk/classes/multisite.php#L21https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/tags/2.0.8/classes/multisite.php#L21https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/tags/2.0.6/classes/columns.php#L221https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/tags/2.0.6/classes/columns.php#L198https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/tags/2.0.6/classes/helper.php#L150https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta/tags/2.0.6/classes/multisite.php#L21https://plugins.trac.wordpress.org/changeset/3515646  Cozmoslabs--Profile Builder Pro The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5. This is due to the use of PHP's maybe_unserialize() function on the attacker-controlled 'args' POST parameter within the wppb_request_users_pins_action_callback() AJAX handler, which lacked any nonce verification, type checking, or input validation before deserialization. Because the handler was registered with both wp_ajax_ and wp_ajax_nopriv_ hooks, it was reachable by completely unauthenticated users. This makes it possible for unauthenticated attackers to inject arbitrary PHP objects into application memory. 2026-05-02 8.1 CVE-2026-7647 https://www.wordfence.com/threat-intel/vulnerabilities/id/c7b897f5-f988-4515-83bc-456f041d7e2e?source=cvehttps://plugins.trac.wordpress.org/browser/profile-builder-pro/trunk/add-ons/user-listing/one-map-listing.php#L271https://plugins.trac.wordpress.org/browser/profile-builder-pro/tags/3.14.5/add-ons/user-listing/one-map-listing.php#L271https://plugins.trac.wordpress.org/browser/profile-builder-pro/trunk/add-ons/user-listing/one-map-listing.php#L13https://plugins.trac.wordpress.org/browser/profile-builder-pro/tags/3.14.5/add-ons/user-listing/one-map-listing.php#L13  Shenzhen Libituo Technology--LBT-T300-HW1 A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. This issue affects the function start_single_service of the component Web Management Interface. Executing a manipulation of the argument vpn_pptp_server/vpn_l2tp_server can lead to buffer overflow. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. 2026-05-03 8.8 CVE-2026-7674 VDB-360827 | Shenzhen Libituo Technology LBT-T300-HW1 Web Management start_single_service buffer overflowVDB-360827 | CTI Indicators (IOB, IOC, IOA)Submit #800705 | Libtor Technology lbt-t300-hw1 closure, xreq). The NULL propagation chain through afb-context.c:110 (context- >credentials = afb_cred_addref(NULL)) and afb-cred.c:163 (returns NULL when cred is NULL) confirms that credentials are zeroed before the target API executes. The attacker controls both api and verb parameters via JSON input, allowing execution of any registered API with a NULL credential context. APIs that rely on context- >credentials for authorization decisions may fail open when receiving NULL credentials, enabling privilege escalation. This vulnerability was introduced in commit abbb4599f0b921c6f434b6bd02bcfb277eecf745 on 2018-02-14. 2026-05-01 7.8 CVE-2026-37525 https://gerrit.automotivelinux.org/gerrit/src/app-framework-binderhttps://gist.github.com/sgInnora/8526eedcfd826d05ef1fc45d8f405643  n/a--Automotive Grade Linux (AGL) afb-daemon v19.90.0 AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervision commands (Exit, Do, Sclose, Config, Trace, Debug, Token, slist) without authentication via the abstract Unix socket @urn:AGL:afs:supervision:socket. The on_supervision_call function in src/afb-supervision.c dispatches all 8 commands without any credential verification. The abstract socket has no DAC protection, as acknowledged in the official CAUTION comment in src/afs-supervision.h. This allows a low-privileged local process to kill the daemon (DoS via Exit command), execute arbitrary API calls (via Do command), close arbitrary user sessions (via Sclose command), or leak the entire global configuration (via Config command). The vulnerability was introduced in commit b8c9d5de384efcfa53ebdb3f0053d7b3723777e1 on 2017-06-29. 2026-05-01 7.8 CVE-2026-37526 https://gerrit.automotivelinux.org/gerrit/src/app-framework-binderhttps://gist.github.com/sgInnora/8526eedcfd826d05ef1fc45d8f405643  n/a--Automotive Grade Linux (AGL) aglservice v17.1.12 AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library. In isotp_continue_receive (receive.c:87-89), the payload_length for a Single Frame is extracted from a 4-bit nibble in the CAN frame data, yielding values 0-15. However, a standard CAN frame is only 8 bytes, with payload starting at data[1] (7 bytes available). When payload_length exceeds the available data (e.g., nibble=15 but only 7 payload bytes exist), memcpy(message.payload, &data[1], payload_length) reads up to 8 bytes past the end of the data buffer. 2026-05-01 7.1 CVE-2026-37532 https://gerrit.automotivelinux.org/gerrit/apps/agl-service-can-low-levelhttps://gist.github.com/sgInnora/8526eedcfd826d05ef1fc45d8f405643  n/a--Automotive Grade Linux (AGL) isotp-c openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the 4-bit payload length nibble is used directly as the memcpy size without validating it against the actual CAN data length. A malicious CAN frame with an oversized length nibble can cause memory reads beyond the buffer, allowing attackers to cause a denial of service, or gain sensitive information. 2026-05-01 7.1 CVE-2026-37535 https://github.com/openxc/isotp-chttps://github.com/openxc/isotp-c/blob/master/src/isotp/receive.chttps://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381  n/a-- Vanetza V2X v26.02 An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The vulnerability exists in the GeoNetworking packet processing pipeline where OpenSSL exceptions from ECC point validation (invalid compressed point, point not on curve) are not properly caught by the Router::indicate() call chain. The openssl_wrapper.cpp check() function (line 19) throws openssl::Exception when OpenSSL operations fail. The parser's catch block in parse_secured() should catch these, but the exception escapes through subsequent processing stages (indicate_common, indicate_extended). This causes std::terminate, crashing the V2X receiver. 2026-05-01 7.5 CVE-2026-37554 https://github.com/riebl/vanetzahttps://github.com/riebl/vanetza/blob/master/vanetza/security/openssl_wrapper.cpphttps://github.com/riebl/vanetza/blob/master/vanetza/geonet/router.cpphttps://gist.github.com/sgInnora/45128ae15d52df7238680a8f2da8359f  chartbrew--chartbrew Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes public chart retrieval and export routes that only verify project-level public access and, for exports, a team-level export toggle. The routes do not verify whether the target chart is actually allowed on the public report or whether the governing SharePolicy permits public access. An unauthenticated attacker who knows a chart identifier in a public project can read or export chart data for charts that were intentionally hidden from the report. This issue has been patched in version 5.0.0. 2026-04-30 7.5 CVE-2026-40595 https://github.com/chartbrew/chartbrew/security/advisories/GHSA-mq7q-6xh6-5649https://github.com/chartbrew/chartbrew/releases/tag/v5.0.0  cyberhobo--Geo Mashup The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.18. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The `esc_sql()` function is applied but is ineffective in the `ORDER BY` context because the value is not enclosed in quotes. Additionally, while a `sanitize_sort_arg()` allowlist-based sanitizer was added in version 1.13.18, it is only applied in the AJAX code path (`sanitize_query_args()`) and not in the `render-map.php` or template tag code paths. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database via a time-based blind approach. 2026-05-02 7.5 CVE-2026-4060 https://www.wordfence.com/threat-intel/vulnerabilities/id/2fa5ae9a-532c-40f9-b70a-217f0f9cd473?source=cvehttps://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup-db.php#L1767https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup-db.php#L1785https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/render-map.php#L166https://plugins.trac.wordpress.org/changeset/3503627/  chartbrew--chartbrew Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes POST /api/chart/:chart_id/query without authentication. The endpoint only checks team.allowReportRefresh and does not verify that the target chart belongs to a public report, that the project is public, or that sharing policy allows the operation. An unauthenticated attacker who knows a chart identifier can trigger a data refresh and retrieve the current data of private charts. This issue has been patched in version 5.0.0. 2026-04-30 7.5 CVE-2026-40601 https://github.com/chartbrew/chartbrew/security/advisories/GHSA-cpr6-mhgm-893whttps://github.com/chartbrew/chartbrew/releases/tag/v5.0.0  cyberhobo--Geo Mashup The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map_post_type' parameter in all versions up to, and including, 1.13.18. This is due to the `SearchResults` hook explicitly calling `stripslashes_deep($_POST)` which removes WordPress magic quotes protection, followed by the unsanitized `map_post_type` value being concatenated into an `IN(...)` clause without `esc_sql()` or `$wpdb- >prepare()`. The 'any' branch of the same code correctly applies `array_map('esc_sql', ...)`, but the else branch does not. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database via a time-based blind approach. Exploitation requires the Geo Search feature to be enabled in plugin settings. 2026-05-02 7.5 CVE-2026-4061 https://www.wordfence.com/threat-intel/vulnerabilities/id/cc3cf6c5-643e-49ca-b09c-bd7cfec328ee?source=cvehttps://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup-db.php#L1748https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/php/Hooks/SearchResults.php#L39https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/php/Search.php#L152https://plugins.trac.wordpress.org/changeset/3503627/  cyberhobo--Geo Mashup The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids' and 'exclude_object_ids' parameters in all versions up to, and including, 1.13.18. This is due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. The `esc_sql()` function is applied but is ineffective because the values are placed in an unquoted `IN(...)` / `NOT IN(...)` SQL context - `esc_sql()` only escapes quote characters and provides no protection against parenthesis or SQL keyword injection. Additionally, while a numeric-only sanitizer exists in `sanitize_query_args()`, it is only applied in the AJAX code path and not in the `render-map.php` or template tag code paths. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database via a time-based blind approach. 2026-05-02 7.5 CVE-2026-4062 https://www.wordfence.com/threat-intel/vulnerabilities/id/abc5ed0a-504f-4d8c-9662-a4c9f7c7acb8?source=cvehttps://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup-db.php#L1755https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/geo-mashup-db.php#L1759https://plugins.trac.wordpress.org/browser/geo-mashup/trunk/render-map.php#L166https://plugins.trac.wordpress.org/changeset/3503627/  n/a--libssh2 A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue. 2026-05-01 7.3 CVE-2026-7598 VDB-360555 | libssh2 userauth.c userauth_password integer overflowVDB-360555 | CTI Indicators (IOB, IOC, IOA)Submit #805564 | libssh2 Shell interface, gaining root-level access to the device. 2026-04-29 4.3 CVE-2018-25310 ExploitDB-44387Vulnerability AdvisoryVulnCheck Advisory: VideoFlow Digital Video Protection DVP 10 Authenticated Remote Code Execution  gnu--wget2 wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication. 2026-04-29 4.8 CVE-2026-1858 https://www.tenable.com/security/research/tra-2026-37  wazuh--wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, resulting in writing a NULL byte exactly 1 byte before the start of the buffer allocated by strdup. Due to unsigned integer underflow and pointer arithmetic wrapping, the write lands at offset -1 from the buffer, corrupting heap metadata. A malicious actor can potentially leverage this issue through a compromised agent to cause denial of service or heap corruption by injecting a specially crafted alert into the alerts log file monitored by wazuh-logcollector. This issue has been patched in version 4.14.4. 2026-04-29 4.4 CVE-2026-26204 https://github.com/wazuh/wazuh/security/advisories/GHSA-j4c7-hwjw-8857https://github.com/wazuh/wazuh/releases/tag/v4.14.4  Oracle Corporation--Oracle Linux An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments -- that process (via dtrace -p , pid probes, or USDT), the ELF parser reads heap memory beyond the allocated section cache array without any bounds check. This results in an uninitialized/out-of-bounds heap read that can cause a NULL pointer dereference crash of the dtrace process (DoS), or -- depending on heap layout -- a read-then-use of a garbage pointer controlled by adjacent allocations, providing a foothold toward further exploitation in a privileged context. 2026-05-01 4.4 CVE-2026-35233 Oracle Advisory  n/a-- V2Board  v1.7.4 SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort parameter from user input is passed directly to User::orderBy($sort, $sortType) without validation. An authenticated admin can sort users by any database column including password, remember_token, and other sensitive fields, enabling information disclosure through ordering analysis. 2026-05-01 4.9 CVE-2026-37505 https://github.com/v2board/v2boardhttps://gist.github.com/sgInnora/1330e1a82caa79906eec55eeff2c99b9  nextlevelbuilder--ui-ux-pro-max-skill A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the function data.get of the file .claude/skills/design-system/scripts/generate-slide.py of the component Slide Generator. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a pull request but has not reacted yet. 2026-05-01 4.3 CVE-2026-7596 VDB-360549 | nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scriptingVDB-360549 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #805510 | nextlevelbuilder ui-ux-pro-max-skill 2.5.0 Slide Generator Multiple Stored XSShttps://github.com/nextlevelbuilder/ui-ux-pro-max-skill/issues/247https://github.com/nextlevelbuilder/ui-ux-pro-max-skill/pull/274https://github.com/nextlevelbuilder/ui-ux-pro-max-skill/  n/a--Open5GS A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_type leads to denial of service. The attack is possible to be carried out remotely. Upgrading to version 2.7.7 is able to address this issue. The identifier of the patch is ebc66942b6f8f1fab2d640e71cf4e9f1a423b426. It is advisable to upgrade the affected component. 2026-05-02 4.3 CVE-2026-7601 VDB-360558 | Open5GS AMF gmm-handler.c denial of serviceVDB-360558 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #805675 | Open5GS v.2.7.6 Denial of Servicehttps://github.com/open5gs/open5gs/issues/4321https://github.com/open5gs/open5gs/commit/ebc66942b6f8f1fab2d640e71cf4e9f1a423b426https://github.com/open5gs/open5gs/releases/tag/v2.7.7https://github.com/open5gs/open5gs/  itsourcecode--Courier Management System A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown function of the file /edit_user.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. 2026-05-02 4.7 CVE-2026-7612 VDB-360569 | itsourcecode Courier Management System edit_user.php sql injectionVDB-360569 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #806275 | itsourcecode Courier Management System V1.0 SQL Injectionhttps://github.com/ltranquility/submit/issues/12https://itsourcecode.com/  ChatGPTNextWeb--NextChat A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet. 2026-05-02 4.3 CVE-2026-7643 VDB-360755 | ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policyVDB-360755 | CTI Indicators (IOB, IOC, IOA)Submit #806833 | ChatGPTNextWeb NextChat 2.16.1 Permissive CORS Wildcard Policyhttps://github.com/ChatGPTNextWeb/NextChat/issues/6756https://github.com/ChatGPTNextWeb/NextChat/  n/a--crmeb_java A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-service/src/main/java/com/zbkj/service/service/impl/UploadServiceImpl.java of the component Admin Upload. Performing a manipulation of the argument model results in unrestricted upload. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2026-05-03 4.7 CVE-2026-7673 VDB-360826 | crmeb_java Admin Upload UploadServiceImpl.java unrestricted uploadVDB-360826 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #800684 | crmeb crmeb_java 1.3.4 Unrestricted Uploadhttps://fx4tqqfvdw4.feishu.cn/docx/EgMOdHyq6oyxhux5vpJcr5cgnAf?from=from_copylink  kerwincui--FastBee A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument fileName results in path traversal. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. 2026-05-03 4.3 CVE-2026-7676 VDB-360829 | kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversalVDB-360829 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #800723 | kerwincui FastBee ≤ 1.2.1 Path Traversalhttps://fx4tqqfvdw4.feishu.cn/docx/Yv1gdAzFpoHCUUxDdKSculR4nKf?from=from_copylink  jsbroks--COCO Annotator A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipulation of the argument folder can lead to path traversal. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. 2026-05-03 4.3 CVE-2026-7680 VDB-360833 | jsbroks COCO Annotator Data Endpoint datasets.py path traversalVDB-360833 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #801150 | jsbroks COCO Annotator 0.11.1 Absolute Path Traversalhttps://github.com/natanmorette-thoropass/thoropass-vuln-research-program/tree/main/2026/Path%20Traversal%20via%20Dataset%20Folder%20Parameter  AMTT--Hotel Broadband Operation System A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown function of the file /manager/card/cardhand_submit.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. 2026-05-03 4.7 CVE-2026-7697 VDB-360866 | AMTT Hotel Broadband Operation System cardhand_submit.php sql injectionVDB-360866 | CTI Indicators (IOB, IOC, TTP, IOA)Submit #803272 | Anmei Century (Beijing) Technology Co., Ltd. Hotel Broadband Operation System v1.0 SQL Injectionhttps://github.com/testnet0/testnet/issues/74  Telegram--Desktop A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/url_auth_box.cpp of the component Bot API. The manipulation of the argument login_url leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2026-05-03 4.3 CVE-2026-7701 VDB-360870 | Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereferenceVDB-360870 | CTI Indicators (IOB, IOC, IOA)Submit #804341 | Telegram Telegram Desktop

Read more »

Midnight 15″ M5 MacBook Air Drops to $1099 at Amazon & B&H
Amazon and B&H are both offering the Midnight 15-inch M5 MacBook Air with 16GB RAM and a 512GB SSD for just $1099, down from Apple’s standard $1299 MSRP. That works out to a clean $200 discount, making this one of the best prices currently available on Apple’s larger MacBook Air. Check Amazon's pricing here. B&H is matching the same $1099 sale price while also offering free 1–2 day shipping to most U.S. addresses. Browse current B&H pricing here. For the latest sales and deals, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

MacBook Neo Remains Fully In Stock at Walmart — Free Shipping & Pickup Available
The MacBook Neo continues to remain fully in stock across Walmart’s online store, making it one of the easiest places right now to buy Apple’s newest budget-friendly MacBook without waiting through extended delivery windows. Check current MacBook Neo availability at Walmart. Walmart is currently offering fast free shipping on MacBook Neo orders, along with free local store pickup (where available). While stock levels continue to fluctuate at other Apple retailers, Walmart remains one of the few places where the full Neo lineup appears broadly available.For the latest sales and deals, see our MacBook Neo Price Tracker, updated daily.

Read more »

Space Black 14″ M5 MacBook Pro Drops to $1499 at Amazon
Amazon is now offering Apple's Space Black 14-inch M5 MacBook Pro (16GB RAM/1TB SSD) for just $1499, down from Apple's standard $1699 MSRP. That works out to a clean $200 discount, making it one of the best prices currently available on Apple's newest 14-inch MacBook Pro. Check current Amazon pricing here. What's especially notable is that this discount applies to the upgraded 1TB configuration rather than a lower-storage model. Combined with Amazon's fast shipping, it's one of the stronger MacBook Pro deals available right now.For the latest sales and deals, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Metro Makes Apple’s iPhone 16e Effectively Free — Plus a Free $100 Visa Card
Metro by T-Mobile is now offering one of the more aggressive prepaid iPhone deals currently available, giving switchers Apple’s iPhone 16e effectively for free when they bring over their existing number. Customers pay $99.99 upfront for the 128GB iPhone 16e, then receive a $100 virtual prepaid Mastercard after maintaining qualifying service for three months, offsetting the entire device cost. Metro is also including instant savings at checkout, making this one of the simpler no-trade-in iPhone offers currently available. See this deal on Metro's website. For additional iPhone sales and carrier promotions, visit our iPhone Price Tracker, updated regularly.

Read more »

Amazon Slashes 13″ & 15″ M5 MacBook Air Prices by $200 off Apple MSRP, prices now start at only $899
Amazon has increased its End of Memorial Day discounts on Apple's entry-level M5 MacBook Air lineup, dropping both the 13-inch and 15-inch 16GB/512GB models by $200 below Apple's MSRP. The 13-inch model is now available for about $899, while the larger 15-inch version has fallen to roughly $1099. Shop the 13-inch deal here. These are some of the lowest prices we've seen so far on Apple's newest MacBook Air models, making right now a particularly attractive time to buy. View the 15-inch deal here. For the latest sales and deals, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, updated daily.

Read more »

14″ M5 MacBook Pros on Sale at Amazon & B&H — Up to $200 Off Apple Pricing
Amazon and B&H are both offering discounts on Apple's popular 14-inch M5 MacBook Pro configurations, with the 16GB/1TB model now selling for $200 below MSRP and the 24GB/1TB version discounted by $150. Check current Amazon pricing here. While Amazon offers fast shipping and broad availability, B&H matches many of the same sale prices while adding free 1–2 day shipping to most U.S. addresses. Browse current B&H pricing here. For the latest sales and deals, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Memorial Day Sale: 13″ M5 MacBook Airs Return to $150
Amazon has brought back its $150-off pricing on Apple’s 13-inch M5 MacBook Air lineup for Memorial Day weekend, with discounts available across multiple configurations. The popular 16GB/512GB model is once again selling for about $949 instead of Apple’s $1099 MSRP, while higher-capacity models are seeing the same $150 discount. Check current Amazon pricing here. The nice thing about this sale is its consistency—every major 13-inch M5 MacBook Air configuration is discounted by the same amount, making it easy to compare models without worrying about uneven pricing. For the latest sales and deals, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

15″ M5 MacBook Airs on sale again for $150 at Amazon — Lowest Prices Yet
Amazon is now offering some of the best pricing yet on Apple’s 15-inch M5 MacBook Air lineup, with $150 discounts across all configurations. The popular 16GB/512GB model has dropped to about $1149 from Apple’s $1299 MSRP, and similar savings are showing up on higher storage and memory options as well. Check current deals at Amazon. For the latest sales and deals, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Amazon Discounts Space Black 14″ M5 MacBook Pros by Up to $300 Off MSRP
Amazon is now offering some of the best prices we’ve seen so far on Apple’s Space Black 14-inch M5 MacBook Pro lineup, with discounts ranging from $199 to $300 below Apple’s standard MSRP. The base 16GB RAM/1TB SSD model is now down to $1499.99 versus Apple’s $1699 MSRP, while the upgraded 32GB RAM/1TB SSD version has dropped to $1799 compared to Apple’s $2099 MSRP. Check current Amazon pricing here. The middle 24GB RAM/1TB SSD configuration is also discounted to $1749, or $150 below Apple pricing. Together, these are currently among the lowest prices available for Space Black 14″ M5 MacBook Pro models from Apple’s major retailers. For the latest sales and deals, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Amazon Cuts Prices on 16″ M5 Pro/Max MacBook Pros — $250 Off MSRP
Amazon is now discounting Apple’s entire 16-inch M5 Pro and M5 Max MacBook Pro lineup by $250 off MSRP, with every listed configuration currently reduced below Apple’s standard pricing. The sale includes both Black and Silver models across the M5 Pro and M5 Max families, with prices starting at $2449.99 for the 24GB/1TB M5 Pro configuration. Check current Amazon pricing here. Higher-end M5 Max models are also seeing the same consistent $250 discounts, including the 36GB/2TB configuration at $3649.99 and the 48GB/2TB version at $4149.99. See these models here. These are currently the lowest prices available among Apple’s major retailers. For the latest sales and deals, see our 16" MacBook Pro Price Tracker, updated daily.

Read more »

Verizon Drops AirPods Pro 3 to $199 — Lowest Price Available Anywhere Right Now
Verizon is currently offering Apple’s AirPods Pro 3 for $199, down from Apple’s standard $249 MSRP. That’s a clean $50 discount (20% off), and right now it appears to be the lowest widely available price from any major Apple retailer. Check current Verizon pricing here. The sale price applies to online orders only, and Verizon also offers free shipping or free local store pickup (if available in your area). Unlike many carrier promotions, Verizon service is not required to purchase the AirPods. For the latest sales and deals, see our AirPods Price Tracker, updated daily.

Read more »

Total Wireless Has One of the Most Aggressive iPhone 17e Deals Right Now
Total Wireless is currently offering one of the more aggressive iPhone 17e deals available right now. Customers signing up for the carrier’s $60/month Total 5G+ Unlimited plan can get the phone for $0 per month over 24 months, effectively covering the full cost of Apple’s $599 MSRP iPhone 17e. Check the current Total Wireless deal here. If you’d rather buy the phone outright, Total is also offering $200 off the full retail price, dropping the iPhone 17e to about $399 with qualifying plans and port-in activation. That combination of upfront savings and financing flexibility makes this one of the stronger prepaid iPhone deals available right now. For the latest sales and deals, see our iPhone Price Tracker, updated daily.

Read more »