Two Critical Vulnerabilities Demand Action Before Friday
Two Critical Vulnerabilities Demand Action Before Friday
On 10 July 2026, two critical vulnerabilities require immediate attention from UK small businesses. CVE-2026-58123, affecting Hermes WebUI, scores 9.8 on the CVSS scale and permits unauthenticated remote code execution through four HTTP requests with no credentials required. CVE-2026-58122, rated 9.1, allows attackers to bypass local-origin protections and conduct server-side request forgery. Microsoft patched CVE-2026-50656 (RoguePlanet), a Windows Defender elevation-of-privilege flaw with publicly available exploit code since 10 June…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.