Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox
Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor’s command sandbox with no click required. Both are fixed in Cursor 3.0.
Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor’s command sandbox with no click required. Both are fixed in Cursor 3.0.
Citrix has patched a pre-auth NetScaler memory overread bug, CVE-2026-8451, that echoes the 2023 CitrixBleed flaw and was found while researchers dissected an earlier Citrix bug.