Get the latest crypto news, updates, and reports by subscribing to our free newsletter.
Giấy phép số 4978/GP-TTĐT do Sở Thông tin và Truyền thông Hà Nội cấp ngày 14 tháng 10 năm 2019 / Giấy phép SĐ, BS GP ICP số 2107/GP-TTĐT do Sở TTTT Hà Nội cấp ngày 13/7/2022.
© 2026 Index.vn
Hanoi Police said they detected multiple serious security vulnerabilities affecting popular AI platforms, network devices and applications. The issues, if exploited, could enable attackers to take remote control, access sensitive data and disrupt the operation of information systems.
The OpenClaw autonomous AI agent platform can scan, read files, launch applications and execute commands based on user requests. Hanoi Police noted that exploiting CVE-2026-33576 could allow hackers to gain remote control, access data and directly affect the operation of an information system.
For the Tenda AC10 router (firmware version 16.03.10.10_multi_TDE01), the police cited memory overflow vulnerabilities, OS command injection and the use of hard-coded encryption keys, including CVE-2026-5550, CVE-2026-5548, CVE-2026-5547 and CVE-2026-5549. Exploitation could enable remote code execution with the highest privileges, and command injection in the MAC address filtering function could interfere with the device’s operating system configuration.
Hanoi Police also flagged vulnerabilities on Cisco UCS C-Series M5, M6, E-Series M3, M6 and Catalyst 8300 Series Edge uCPE. The listed issues include CVE-2026-20093, CVE-2026-20094, CVE-2026-20095, CVE-2026-20096 and CVE-2026-20160. According to the police, attackers could gain the highest administrator privileges on the server controller and install malware into server firmware even after reinstalling the operating system or BIOS. The police also noted that the vendor’s internal software license management could allow attackers to issue malicious API requests to intervene directly in the server OS.
On Google Chrome, the police cited vulnerabilities CVE-2026-5287, CVE-2026-5279 and CVE-2026-5285 that exploit the built-in PDF viewer. The police said attackers could distribute fake files via email or the internet to trick victims into opening them, thereby gaining control and stealing sensitive data. They also noted that a JavaScript tool could allow attackers to execute arbitrary commands within the browser’s sandbox.
To promptly prevent and counter cybersecurity risks, Hanoi Police advised agencies and individuals to take the following steps:
The police also warned against uploading internal or state secrets and synchronizing internal data with AI tools, citing the risk of leakage and exploitation.

Premium gym chains are entering a “golden era” that is ending or already in decline, as rising operating costs collide with shifting consumer preferences toward more flexible, community-based ways to exercise. Long-term memberships are shrinking, margins are pressured by higher rents and facility expenses, and competition from smaller, more personalized…