A command-injection vulnerability in the Spring CLI VSCode extension allows attackers to execute arbitrary commands on affected user machines.   The vulnerability, tracked as CVE-2026-22718, affects all versions of the extension through 0.9.0 and poses a significant risk to developers still using the outdated tool despite its end-of-life status.  Vulnerability Details  The Spring CLI VSCode extension contains a command-injection flaw that attackers can exploit to execute […]

The post Spring CLI Vulnerability Allows Attackers to Execute Commands on User Systems  appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Elastic has released urgent security patches addressing four significant vulnerabilities in Kibana that could enable attackers to steal sensitive files, trigger service outages, and exhaust system resources. The advisories, published on January 14, 2026, affect multiple Kibana versions spanning from 7.x through 9.2.3. Critical File Disclosure and SSRF Vulnerability The most severe flaw, CVE-2026-0532, has […]

The post Multiple Elastic Vulnerabilities Could Lead to File Theft and DoS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.