CVE Watch - EOLRadar

3 articles

🔴 CRITICAL

🔐 CVE Watch May 18

CVE-2026-44578 Nextjs 14.2.35 exposes self-hosted Next.js to unauthenticated SSRF with no patch for EOL 13.x/14.x. Apply…

cve-2026-44578 devops

6 min read

🔴 CRITICAL

🔐 CVE Watch May 14

The CVSS 9.1 Bleeding Llama vulnerability in Ollama allows remote attackers to silently extract process memory.…

ai-infra bleeding-llama

13 min read

🔴 CRITICAL

🔐 CVE Watch May 10

CVE-2024-23897 is a CVSS 9.8 unauthenticated RCE in Jenkins. EOL versions will never be patched. CISA…

cve-2024-23897 devops

7 min read