Server reported tensions in Netherlands [5 sources]

A critical security vulnerability (CVE-2026-3854, CVSS 8.7) has been disclosed affecting GitHub.com and GitHub Enterprise Server. The flaw is a command injection issue allowing authenticated users with repository push access to achieve remote code execution through a single git push command.

CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog on Friday, including CVE-2024-57726 (CVSS 9.9), a missing authorization vulnerability affecting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X series routers. These vulnerabilities are currently being actively exploited in the wild.