Scworld Critical Vulnerabilities Discovered in CrowdStrike LogScale and Other Security Tools
Article Content
- •CVE-2026-40050 allows unauthenticated access to files in CrowdStrike LogScale.
- •Tenable's Nessus scanner has a high-severity vulnerability (CVE-2026-33694) affecting Windows.
- •Organizations must enhance patch management and vendor risk assessments to mitigate risks.
CrowdStrike disclosed a critical vulnerability (CVE-2026-40050) in its LogScale product, allowing unauthenticated attackers to exploit a path traversal flaw to access sensitive files. This vulnerability affects self-hosted LogScale customers, while SaaS users have been mitigated. Additionally, Tenable reported a high-severity vulnerability (CVE-2026-33694) in its Nessus scanner, which could allow file deletion or arbitrary code execution. Microsoft patched a privilege escalation vulnerability (CVE-2026-40372) in ASP.NET Core, and a new Linux vulnerability (CVE-2026-41651) allows full root access on affected systems. The incidents highlight ongoing risks in third-party dependencies and data protection, particularly in the UAE's financial and government sectors. Organizations are urged to prioritize patch management and strengthen vendor risk assessments. AI advancements in cybersecurity also raise concerns about unauthorized access to tools designed for vulnerability discovery.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CrowdStrike and CVE-2026-33694 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…