A critical Cross-Site Scripting (XSS) vulnerability has been discovered in ZITADEL, a popular open-source identity and access management platform. Tracked as CVE-2026-29191 with a Critical severity rating, this flaw resides in the platform’s login V2 interface, specifically within the /saml-post endpoint. It allows unauthenticated remote attackers to execute malicious JavaScript directly within a user’s browser. With a […]

The post 1-Click ZITADEL Vulnerability Could Allow Full System Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security flaw has been discovered in Nginx UI that allows unauthenticated threat actors to download and decrypt complete system backups. Tracked as CVE-2026-27944, this vulnerability carries a maximum critical severity score of 9.8 out of 10. The flaw exposes highly sensitive data, including user credentials, session tokens, and SSL private keys, putting entire […]

The post Nginx UI Vulnerabilities Let Attackers Download Full System Backups appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.