SiteCountry Blog

Sign in Subscribe

Vulnerability Management

Developer analyzing Spring Boot code and JSON payloads while investigating the Fastjson 1.x RCE vulnerability in a data

Fastjson 1.x RCE Vulnerability Targeted as Attackers Exploit Spring Boot Apps

A critical unauthenticated remote code execution flaw in Fastjson 1.x is being actively exploited against Spring Boot applications, with no official patch available for the legacy library line.

Developer workstation with an Ubuntu desktop running a terminal command to apply a snapd security update, with a notebook

Ubuntu snap-confine Flaw Lets Local Users Gain Root on Default Desktop Installs

A high-severity flaw in Ubuntu's snap-confine utility could let any local user escalate to root on default desktop installs of Ubuntu 24.04, 25.10, and 26.04.

Developer inspecting React Flight streaming payloads in browser network tools

React Server Components Flight Protocol: Deserialization Risks and Defenses

A practical look at how the React Flight streaming protocol became a deserialization attack surface, what the React2Shell flaw exposed, and how teams can harden Server Components.

Editorial illustration of a network firewall protecting internal servers from an external attacker attempting to exploit an

Qilin Ransomware Group Exploits PAN-OS Authentication Bypass for Initial Access

A high-severity PAN-OS authentication bypass flaw was weaponized by Qilin ransomware operators in June 2026, enabling initial access to enterprise environments through vulnerable Palo Alto Networks firewalls.