TAG
#cve
Stories connected through a shared idea, actor, technology or theme.
FreeRDP 3.32.1 ships a security and protocol-hardening releaseThe release addresses checks in gateway HTTP timeouts, channel lengths, media-type negotiation, smart-card emulation and other protocol paths. It also fixes a regression affecting fragmented static-channel copy and paste and adds mobile platform updates.→Bifrost HTTP transport receives a new unauthenticated RCE disclosureThe CVE describes unauthenticated plugin-path submission through POST /api/plugins when management authentication is disabled, allowing native code execution on affected dynamically linked builds. The published static Docker image is expected to be limited to SSRF, but operators should still upgrade or enable management authentication.→Forward opens its network digital twin and AI workflow to wider teamsThe trial lets network, security and cloud teams ask plain-language questions against a mathematically accurate model and receive evidence-based answers. It can also identify the assets affected by a CVE and provide deterministic evidence about how proposed changes affect production networks across major clouds.→