This archive includes all published incident pages. Page 43 of 44.
Each page is intended to help a security team answer three questions quickly: why the issue is AI-relevant, what part of the workflow may be exposed, and what actions should happen first.
Selection criteria and correction policy are documented in Methodology & Editorial Policy.
Source disclosure: Unknown | Published on Radar: March 4, 2026
On September 25, 2025, Cisco released several security advisories addressing 3 vulnerabilities, 2 of which are critical.
Source disclosure: Unknown | Published on Radar: March 4, 2026
On October 15, 2025, F5 disclosed that a sophisticated nation-state actor breached its systems and maintained long-term persistent access into F5's infrastructure.
Source disclosure: Unknown | Published on Radar: March 4, 2026
On October 23, 2025, Microsoft released an out-of-band update to address a critical vulnerability in Windows Server Update Service (WSUS).
Source disclosure: Unknown | Published on Radar: March 4, 2026
On December 17, 2025, Cisco released a security advisory for a critical vulnerability affecting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager products.
Source disclosure: January 12, 2026 | Published on Radar: February 14, 2026
MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move...
Source disclosure: January 8, 2026 | Published on Radar: February 14, 2026
llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_discard parameter is parsed directly from JSON input in the llama.
Source disclosure: January 6, 2026 | Published on Radar: February 25, 2026
Overview A vulnerability in the Forcepoint One DLP Client allows bypass of the vendor-implemented Python restrictions designed to prevent arbitrary code execution.
Source disclosure: January 5, 2026 | Published on Radar: February 14, 2026
Dify is an open-source LLM app development platform. Prior to version 1.11.0, the API key is exposed in plaintext to the frontend, allowing non-administrator users to view and reuse it.
Source disclosure: December 23, 2025 | Published on Radar: February 14, 2026
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. In versions 0.15.2 and prior, an RCE vulnerability exists in useMarkdown.
Source disclosure: December 19, 2025 | Published on Radar: February 14, 2026
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.