#CVE
All CosmicBytez Labs articles tagged #CVE, across news, security advisories, how-to guides, and projects.
- News
Microsoft Drops an Actively Exploited Zero-Day Among Record High of 1,413 Vulnerabilities
Microsoft patched a record 1,413 flaws in October, including an actively exploited Windows Shell zero-day that bypasses Mark of the Web warnings.
- News
Ivanti Connect Secure Zero-Day Chain Gave Attackers Root Access to Fully Patched VPNs
An actor Volexity calls UTA0576 chained 3 Ivanti Connect Secure zero-days for unauthenticated root access; only 2 of 3 flaws are patched.
- News
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
Microsoft's largest Patch Tuesday ever fixes 1,414 flaws, 78 critical, including an exploited Windows Shell zero-day and unauthenticated RCEs.
- Security
CVE-2025-71429: GPT-SoVITS Output Path OS Command Injection
Unauthenticated attackers can inject shell commands via GPT-SoVITS' UVR5 WebUI output-folder field, achieving full remote code execution.
- Security
CVE-2026-108929: Netcore NR268 Router DDNS Argument Injection
A CVSS 9.9 argument injection flaw in Netcore NR268 router firmware lets remote attackers hijack the DDNS Hostname field to run arbitrary commands.
- Security
CVE-2026-108971: D-Link DCS-930L Firmware Signature Verification Bypass
A CVSS 9.6 flaw in D-Link DCS-930L cameras lets remote, unauthenticated attackers flash unsigned firmware via the recovery server.
- News
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
CVE-2026-85097 (CVSS 10.0), a critical flaw in the Bricksforge WordPress plugin, is under active exploitation enabling unauthenticated RCE.
- Security
CVE-2026-97720: Apache Impala JWT/OAuth Authentication Bypass
Apache Impala executor webservers accept any valid JWT without checking its signature, letting attackers bypass JWT/OAuth auth entirely.
- News
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Delivery Path
Researchers released a PoC for CVE-2026-86950, a CoreGraphics bug Apple patched after targeted attacks; WhatsApp's new PDF scans hint at the delivery path.
- News
Citrix Patches NetScaler SAML Zero-Day Exploited in Attacks
Citrix rushed emergency patches for CVE-2026-88779, a NetScaler SAML zero-day exploited in DoS attacks as researchers probe RCE potential.
- News
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
CISA added FortiMail flaw CVE-2026-104286 (CVSS 9.8) to its KEV catalog after active exploitation; no patch yet, only workarounds.
- News
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action
CVE-2026-104286, a critical FortiMail path traversal flaw (CVSS 9.8), is under active exploitation. No patch yet — Fortinet urges workarounds now.
- News
SWIFT Banking & Government Middleware Enables RCE
Thales SConnect flaw CVE-2026-18397 (CVSS 9.4) let any site trigger drive-by RCE on hardware-MFA machines used for SWIFT and government logins.
- Security
CVE-2026-96270: Unauthenticated Stored XSS in Ultimate Member via form_id
Unauthenticated stored XSS in Ultimate Member (≤ 2.13.1) via form_id fires when admins open the Users page in wp-admin. Patched in 2.14.0.
- Security
CVE-2026-97644: Groundhogg Privilege Escalation via Contact Identity Rebinding
CVE-2026-97644 (CVSS 8.8): Groundhogg ≤ 4.9 lets Sales Person+ users rebind contact records to an Admin's user ID, enabling full account takeover.
- News
Critical FortiMail Zero-Day CVE-2026-104286 Actively Exploited, No Patch Yet
CISA added CVSS 9.8 FortiMail flaw CVE-2026-104286 to its KEV catalog after active exploitation; Fortinet has no fix, only workarounds.
- Security
CVE-2026-92244: Unauthenticated Stored XSS in WooCommerce PDF Invoices Plugin
High-severity stored XSS (CVSS 7.2) in PDF Invoices & Packing Slips for WooCommerce, 300K+ sites, triggered via guest checkout fields.
- Security
CVE-2026-102095: Critical Unauthenticated SSRF in Kiteworks Email Protection Gateway
CVSS 9.1 unauthenticated SSRF lets crafted email content make Kiteworks's gateway fetch internal URLs; fixed before version 9.5.0.
- Security
CVE-2026-102102: Critical Unauthenticated SSRF in Kiteworks Email Protection Gateway
Unauthenticated SSRF (CVSS 9.1) in Kiteworks Email Protection Gateway lets attackers force the gateway to fetch internal resources via certificate validation.
- News
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery
Google's GTIG found AI-discovered vulnerabilities are twice as likely to enable remote code execution, as monthly CVE disclosures more than doubled in 2026.
- Security
CVE-2026-39353: InvoicePlane Template Whitelist Flaw Enables RCE
A critical InvoicePlane flaw lets a trusted PHP template become unauthenticated RCE via the public invoice view. CVSS 9.1, fixed in 1.7.2-rc-1.
- Security
CVE-2026-42322: Piwigo Logo Upload Flaw Enables Authenticated RCE
Piwigo ≤ 16.4.0 lets an authenticated admin bypass extension checks in the logo uploader to plant a PHP webshell. CVSS 9.1 — patch to 16.4.0.
- Security
CVE-2026-42323: Unvalidated Batch Manager Filters Enable SQL Injection in Piwigo
High-severity SQL injection (CVSS 7.2) in Piwigo Batch Manager lets authenticated admins inject via unvalidated dimension/filesize filter values.
- Security
CVE-2026-42324: Piwigo Second-Order SQL Injection via image_order[]
A high-severity second-order SQL injection (CVSS 7.2) in Piwigo lets an admin-stored sort value reach ORDER BY clauses unsanitized. Fixed in 16.4.0.
- News
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
A critical WordPress core flaw (CVE-2026-87902, CVSS 9.2) enabling unauthenticated RCE is under active exploitation hours after its Sept 22 patch.
- Security
CVE-2026-31377: Apache Doris FE Meta Service Authentication Bypass
Apache Doris FE meta service (CVE-2026-31377, CVSS 7.5) lets unauthenticated attackers reach internal metadata endpoints via spoofed node info.
- News
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
China-linked UTA0565 chained Chrome and Windows zero-days via spoofed websites to deploy the new CLEANGULP backdoor against Asian targets.
- Security
CVE-2026-25254: Qualcomm Software Center SocketIO Remote Code Execution
A CVSS 9.8 improper-authorization flaw in Qualcomm Software Center's SocketIO interface lets unauthenticated attackers execute arbitrary code.
- Security
CVE-2026-65113: Hard-Coded Credentials Flaw in NVIDIA Infrastructure Controller for Linux
Critical CVSS 9.8 flaw in NVIDIA Infrastructure Controller for Linux lets attackers exploit hard-coded credentials for full system compromise.
- Security
CVE-2026-75799: Unauthenticated Arbitrary PHP File Upload in YAHMAN Add-ons for WordPress
Critical CVSS 9.0 flaw in YAHMAN Add-ons (≤0.9.30) lets unauthenticated attackers cache arbitrary PHP files for RCE. Patched in 0.9.31.
- Security
CVE-2026-96257: Critical Stack-Based Buffer Overflow in Fast FAC1203R Gigabit Edition Routers
Critical CVSS 10 stack overflow in Fast FAC1203R Gigabit Edition routers is remotely exploitable pre-auth; public PoC exploit code is available.
- Security
CVE-2016-15059 — Heap Buffer Overflow in Net::IDN::Punycode's XS Encoder
A decade-old heap overflow in Perl's Net::IDN::Punycode (encode_punycode, fixed in 2.301) was just scored CVSS 9.8 in NVD.
- Security
CVE-2026-13355 — Meta Box AIO Unauthenticated Privilege Escalation to Administrator
Chained flaw in Meta Box AIO lets unauthenticated attackers inject a shortcode that grants WordPress Administrator access (CVSS 9.8).
- Security
CVE-2026-19658 — Unauthenticated PHP Object Injection in Give Tributes for WordPress
Give Tributes ≤ 2.3.1 lets unauthenticated attackers inject a PHP object (CVSS 9.8); impact depends on a co-installed POP gadget chain.
- Security
MaxKB SandboxShellBackend Flaw Enables Unauthenticated Shell Execution
MaxKB's SandboxShellBackend skips human approval on its shell tool, letting untrusted input trigger unauthenticated RCE (CVSS 10).
- Security
CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
Heap-based buffer overflow in F5 BIG-IP APM (OAuth + access policy) allows unauthenticated RCE; added to CISA KEV as actively exploited.
- News
Cisco Zero-Day Highlights API Endpoint Authentication Issues
CVE-2026-76460, a maximum-severity CVSS 10.0 auth bypass in Cisco ISE, is under active exploitation and now sits in CISA's KEV catalog.
- News
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Unauthenticated attackers can run OS commands on Orkes Conductor via unsandboxed script evaluators. Fortinet blocked ~7,000 attempts in a week.
- Security
CVE-2026-45140: Chamilo LMS Unauthenticated Remote Code Execution
A CVSS 9.8 flaw in Chamilo LMS's CStudio plugin import flow lets unauthenticated attackers execute arbitrary code on the server.
- Security
CVE-2026-45143: Chamilo LMS Stored XSS Enables Student-to-Admin Takeover
Unsanitized private messages in Chamilo LMS let a low-privilege student fire stored XSS at an admin's inbox, no link click required.
- Security
CVE-2026-54460: OpenReception Unauthenticated Passkey Injection
A missing auth check on OpenReception's passkey endpoint lets unauthenticated attackers inject WebAuthn credentials and take over staff accounts.
- Security
CVE-2026-63472: Vendure External-Authentication Account Takeover
A CVSS 9.1 flaw lets attackers bind their external login to a victim's Vendure account by email match alone, enabling full account takeover.
- Security
CVE-2025-56563: Server-Side Request Forgery in Zenith Satellite Tracker
Unauthenticated SSRF in Zenith Satellite Tracker 1.0 lets attackers force the server to request internal and cloud metadata endpoints via sat_proxy.php.
- Security
CVE-2026-20284: SQL Injection in Cisco ISE SXP REST API
Authenticated SQL injection in Cisco ISE's SXP REST API (CVSS 9.1) lets admins view, modify, or crash the ISE policy database.
- Security
CVE-2026-58704: Google Pixel Improper Authorization Vulnerability
A CVSS 8.0 improper authorization flaw in Google Pixel's cellular modem is under active, targeted exploitation and added to CISA's KEV catalog.
- Security
Unauthenticated Privilege Escalation in JetFormBuilder ≤ 3.6.2 Allows Admin Account Creation
A critical flaw in JetFormBuilder ≤ 3.6.2 lets unauthenticated attackers register admin accounts via a crafted form-ID request.
- Security
Critical TrueBooker Plugin Flaw Enables Unauthenticated Admin Account Takeover
A CVSS 9.8 authorization bypass in TrueBooker lets unauthenticated attackers change any user's email and reset the password for full takeover.
- News
AI Changed the Exposure Problem. Validation Needs to Change With It.
AI has sped up vulnerability discovery, but only 1.4% of H1 2026's 35,853 published CVEs were ever exploited. Why triage has to shift to continuous validation.
- Security
Critical Stack Overflow in D-Link DIR-823G Routers (CVE-2026-90680)
An unauthenticated stack-based buffer overflow (CVSS 9.9) in D-Link DIR-823G's HNAP1 interface allows remote attackers to corrupt memory...
- Security
CVE-2026-86406: User Registration & Membership Purchase Flaw Lets Any Subscriber Escalate to Administrator
A missing capability check in User Registration & Membership's purchase flow lets any Subscriber claim an Administrator-mapped plan for free.
- News
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Three threat clusters, including a state-sponsored actor, are exploiting two Cisco FMC flaws to steal credentials and deploy Qilin ransomware.
- News
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws
PaperCut shipped maintenance releases for two actively exploited CVEs after a Russian-speaking actor hit 395 orgs in 48 countries using AI agents.
- Security
CVE-2026-16272: Critical Client IP Spoofing in PayTR WHMCS Payment Module
A trusted-source flaw in PayTR's Virtual Pos iFrame API WHMCS module lets attackers spoof client IPs via untrusted headers, undermining payment trust.
- Security
CVE-2026-22590: eProsima Fast DDS Heap Memory Disclosure via DATA_FRAG
A crafted RTPS DATA_FRAG submessage triggers an out-of-bounds heap read in Fast DDS, leaking adjacent memory that can be relayed to other participants.
- Security
CVE-2026-67401: cPanel EmailTrack SQL Injection Leads to Root Code Execution
A mail-privileged cPanel account can abuse EmailTrack's SQL injection flaw to write arbitrary files and execute code as root on the server.
- Security
CVE-2026-50093: Critical File Upload Flaw in Siemens Siveillance Control
Unrestricted file upload in Siveillance Control & Control Pro's OIS web module lets attackers reach root on physical security management servers.
- Security
Unauthenticated SQL Injection Hits SourceCodester Online Voting System
CVE-2026-86290: an unauthenticated SQL injection in SourceCodester's Online Voting System via ajax.php's Category parameter, PoC public.
- Security
SQL Injection in SourceCodester Class & Exam Timetabling System
CVE-2026-86208: an unauthenticated SQL injection in delete_teacher.php lets remote attackers manipulate the ID parameter. Public exploit code exists.
- Security
Second SQL Injection Hits SourceCodester Timetabling System
CVE-2026-86209: SourceCodester's Class and Exam Timetabling System 1.0 has a second unauthenticated SQLi, this time in delete_user.php.
- Security
SQL Injection Hits SourceCodester Timetabling System Again
CVE-2026-86220: an unauthenticated SQLi in SourceCodester's Class and Exam Timetabling System lets attackers inject via modal_add_course.php.
- Security
Third SourceCodester Timetabling SQLi Hits the Admin Product Form
CVE-2026-86224: a pre-auth SQL injection in SourceCodester's Timetabling System admin panel via the fname parameter in modal_add_product.php.
- News
Hackers Exploit Sangoma Switchvox Flaw to Deploy Reverse Shells
A critical unauthenticated SQL injection in Sangoma Switchvox is under active exploitation, dropping reverse shells on roughly 4,000 exposed PBXs.
- News
WordPress Backup Plugin Flaw Exposes Millions of Sites to Takeover Attacks
A second-order SQL injection in All-in-One WP Migration and Backup can leak a secret key and lead to full site takeover; 3.25M sites still exposed.
- Security
CVE-2026-9055: Amelia WordPress Plugin Privilege Escalation Vulnerability
A validation flaw in Amelia's customer-update endpoint lets an attacker become a manager, then hijack an administrator account for full takeover.
- News
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
CVE-2026-60004 lets any registered Gitea user hijack the server via a Git hook injection; CISA adds it to KEV after a reported miner deployment.
- News
Hackers Target Microsoft SharePoint RCE Chain With PoC Exploit
Attackers are probing a two-bug SharePoint chain — a JWT auth bypass plus a BCS flaw — after public PoCs made unauthenticated RCE reachable.
- Security
CISA Adds 2019 Microsoft SQL Server RCE Flaw to KEV Catalog
CISA added CVE-2019-1068, a seven-year-old Microsoft SQL Server RCE flaw, to its Known Exploited Vulnerabilities catalog after confirming active exploitation.
- Security
CISA Adds Ajax.NET Professional Deserialization RCE to KEV Catalog
CISA added CVE-2021-23758, a critical unauthenticated deserialization RCE in the end-of-life AjaxPro.2 library, to its Known Exploited Vulnerabilities catalog.
- Security
CVE-2026-65083: Critical Sandbox Provisioning Flaw in NVIDIA OpenShell
A CVSS 9.9 flaw in NVIDIA OpenShell's sandbox provisioning API can leave AI agent sandboxes with an incomplete block-list, opening the door to RCE.
- Security
CVE-2026-65093: Critical Sandbox Escape in NVIDIA OpenShell for Linux
NVIDIA disclosed a CVSS 9.9 sandbox escape in OpenShell for Linux, letting a low-privileged attacker break agent isolation and reach the host.
- Security
CVE-2026-52490: Critical Code Injection in libtiff tiffcrop
CVSS 9.8 code injection in libtiff's tiffcrop.c allows unauthenticated remote code execution. No patch confirmed; PoC published.
- Security
CVE-2026-66897: Critical LXD Path Traversal Allows Host File Overwrite
A CVSS 9.9 path traversal flaw in LXD's template processing lets attackers with container permissions overwrite arbitrary host files.
- News
Critical Keycloak Flaw Lets Attackers Reset Any Account Password Without Authentication
CVE-2026-18963 (CVSS 9.1) in Keycloak allows unauthenticated attackers to bypass email verification and take over any account. Patch to 26.7.2 immediately.
- Security
CVE-2026-78143: SQL Injection in Barangay Resident Profiling Management System
High-severity SQL injection in Barangay Resident Profiling System 1.0 lets remote attackers extract personal data via the residents.php Search parameter.
- Security
CVE-2026-78207: Critical Prototype Pollution in exceljs-hardened Before v5.0.0
A CVSS 9.4 prototype pollution vulnerability in exceljs-hardened's deepMerge helper allows attackers to corrupt Object.prototype via crafted XLSX files.
- Security
CVE-2026-78211: Critical OS Command Injection in 4MOSAn GCB Doctor
A CVSS 9.8 critical unauthenticated RCE vulnerability in 4MOSAn GCB Doctor exposes systems to full OS command injection via an unremoved ADOdb test page.
- Security
CVE-2026-0551: PHP Object Injection in PPWP – Password Protect Pages WordPress Plugin
PPWP WordPress plugin up to 1.9.18 allows contributor-level PHP object injection via deserialization, enabling RCE on affected sites.
- Security
CVE-2026-10053: GitLab CE/EE Path Traversal Enables Remote Code Execution
A path traversal flaw in GitLab's package registry allows authenticated users to achieve RCE. Affects versions 18.8 through 19.2.1.
- Security
CVE-2026-16149: Security Hardener WordPress Plugin Bypasses All REST API Authorization
Security Hardener plugin up to 2.4.4 overwrites REST endpoint permissions via rest_endpoints filter, bypassing all registered auth callbacks.
- Security
CVE-2026-5388: Critical XSS Sanitization Bypass in justhtml
justhtml before 1.15.0 has multiple sanitization failures allowing XSS bypass via URL helpers, HTML serialization, and Markdown passthrough.
- Security
CVE-2026-58003: Reserved Security Advisory
CVE-2026-58003 is currently reserved. Details are embargoed pending vendor coordination and responsible disclosure.
- Security
CVE-2026-59256: Reserved Security Advisory
CVE-2026-59256 is currently reserved. Details are embargoed pending vendor coordination and responsible disclosure.
- Security
CVE-2026-77946: TRENDnet TEW-821DAP Critical Stack Buffer Overflow
CVSS 10.0 RCE flaw in TRENDnet TEW-821DAP firmware lets attackers exploit NTP config with no patch available.
- Security
CVE-2026-78050: Critical Stack Buffer Overflow in Comfast CF-N1-S Router
CVSS 9.9 stack overflow in Comfast CF-N1-S 2.6.0.1 NTP timezone endpoint enables unauthenticated remote code execution.
- Security
CVE-2026-78122: docker-socket-proxy Fails to Gate Container Read Endpoints
docker-socket-proxy's CONTAINERS guard bypassed via GET requests to /archive, /export, /logs, and /top, exposing arbitrary file reads.
- Security
CVE-2026-78155: Critical Privilege Escalation in StackGres Kubernetes Operator
A CVSS 9.9 flaw in the StackGres Kubernetes operator lets a low-privilege tenant escalate to full cluster admin rights.
- Security
CVE-2026-48749: Incus Malicious Image Arbitrary File Write and RCE (CVSS 9.9)
Critical Incus flaw lets a specially crafted container image read or write arbitrary host files, leading to remote code execution. Fixed in v7.2.0.
- Security
CVE-2026-48750: Incus Exec-Output Symlink Attack Enables Host File Write (CVSS 9.9)
Critical Incus flaw: if exec-output is a symlink, command output files are written to arbitrary host paths. Fixed in v7.2.0.
- Security
CVE-2026-61539: Xinference Llama3 Tool-Call eval() Remote Code Execution
CVSS 10.0: Xinference passes attacker-controlled Llama3 tool-call output directly to eval(), enabling unauthenticated RCE on all versions ≤ 2.5.0.
- Security
CVE-2026-62283: Nezha Monitoring WebSocket Terminal Stream Hijacking
CVSS 9.9: Nezha Monitoring fails to bind WebSocket terminal stream IDs to their creator, letting any authenticated user hijack another user's terminal session.
- Security
CVE-2026-62316: Microsoft UFO MCP Server DNS Rebinding and SSRF via Missing Host Validation
CVSS 8.8: Microsoft's UFO framework MCP server binds to localhost but skips Host/Origin header checks, enabling DNS rebinding and SSRF attacks. Fixed in 3.0.8.
- Security
CVE-2026-62940: Incus Migration Security Restriction Bypass (CVSS 9.9)
Critical Incus flaw allows privilege escalation via unrestricted config overrides during cross-cluster instance migration. Patch to v7.3.0.
- Security
CVE-2026-62941: Incus Cross-Project Copy Privilege Escalation (CVSS 9.9)
Critical TOCTOU flaw in Incus lets restricted project users escalate privileges by copying instances across projects. Fixed in v7.3.0.
- Security
CVE-2026-78003: Critical SSRF via Path Traversal in Mailgun for WordPress Plugin
A critical SSRF vulnerability (CVSS 9.8) in Mailgun for WordPress ≤ 2.2.0 lets unauthenticated attackers make server-side requests via path traversal.
- News
Microsoft Entra ID CVSS 10.0 Flaw Exploited in Wild, Allows Remote Code Execution
Microsoft warns of a CVSS 10.0 RCE flaw in Entra ID (CVE-2026-69836) exploited in the wild. No customer action required — Microsoft patched it server-side.
- Security
CVE-2026-11861: FreeIPA AD Trust Bypass Lets Attackers Impersonate Kerberos Clients
A CVSS 9.6 flaw in FreeIPA lets Active Directory users bypass authentication to FreeIPA services by impersonating client names in Kerberos TGT requests.
- Security
CVE-2026-13097: FreeIPA Privilege Escalation via Kerberos Principal Uniqueness Bypass
A CVSS 9.1 flaw in FreeIPA allows users with LDAP write access to escalate privileges by exploiting duplicate Kerberos principal names in 389-ds.
- Security
CVE-2026-14950: 389 Directory Server Session Expiry Bypass Allows Unauthorized Access
A CVSS 9.8 flaw in the 389 Directory Server web interface lets remote attackers reuse expired session tokens to maintain unauthorized access.
- Security
CVE-2026-16576: Dokan WooCommerce Plugin Privilege Escalation to RCE
A missing capability check in the Dokan multivendor WooCommerce plugin allows Shop Managers to install arbitrary plugins, leading to full site compromise.
- Security
CVE-2026-16926: IBM AIX & PowerVM VIOS Critical Arbitrary File Overwrite
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a critical flaw allowing remote attackers to overwrite arbitrary files. CVSS 9.1. Patch via IBM Fix Central.
- News
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
CVE-2026-73570, a CVSS 8.9 command injection flaw in Zimbra Collaboration, is actively exploited in the wild for unauthenticated RCE via SNMP.
- Security
CVE-2026-15065: Reserved Vulnerability Advisory
CVE-2026-15065 is currently reserved by MITRE. Details have not yet been publicly disclosed by the assigning CNA.
- Security
CVE-2026-75860: WordPress JSON Options Plugin Unauthenticated Options Update (CVSS 9.8)
Critical WordPress plugin flaw lets unauthenticated attackers update arbitrary options, enabling privilege escalation and full site takeover.
- Security
CVE-2026-64849: MLflow SSRF Webhook Bypass Actively Exploited
Critical unauthenticated SSRF in MLflow's webhook system lets attackers redirect requests to steal AWS credentials. Upgrade to 3.15.0.
- Security
CVE-2026-76003: Critical Stack Buffer Overflow in UTT HiPER 1200GW
A remotely exploitable stack-based buffer overflow (CVSS 9.9) in UTT HiPER 1200GW routers up to v2.5.3 allows attackers to execute arbitrary code.
- Security
CVE-2026-76004: Critical Stack Buffer Overflow in UTT HiPER 1250GW HTTP Handler
CVSS 9.9 stack buffer overflow in UTT HiPER 1250GW up to v3.2.7 via the pvid parameter in the HTTP handler enables unauthenticated remote code execution.
- Security
Microsoft IKE Service Extensions Double Free RCE (CVE-2026-33824)
CISA-flagged double free vulnerability in Microsoft IKE Service Extensions enables unauthenticated remote code execution. Patch immediately.
- Security
vm2 Sandbox Escape via Error.cause Host Object Leak (CVE-2026-47686)
Critical vm2 sandbox escape allows Node.js sandbox code to access the host process object via unsanitized Error.cause, enabling full RCE.
- Security
vm2 Prototype Chain Escape via Function.prototype.call Stacking (CVE-2026-47698)
Critical vm2 flaw lets sandboxed code sever host intrinsic prototype chains using stacked Function.prototype.call, escaping the sandbox entirely.
- Security
CVE-2026-55674: Discourse Unauthenticated HTML Injection via Cookie
A CVSS 9.3 critical flaw in Discourse allows unauthenticated attackers to inject arbitrary HTML using a crafted cookie value.
- Security
CVE-2026-71566: KubeVirt Auth Bypass via FakeFish Credential Ignore
CVSS 9.3 critical: KubeVirt's FakeFish BMC emulator ignores provided credentials, letting any user claim admin access.
- Security
CVE-2026-74799: SiYuan pprof Debug Endpoints Exposed Without Authentication
SiYuan before 3.7.4 exposes Go pprof debug endpoints unauthenticated, leaking in-memory secrets including API keys and auth codes.
- Security
CVE-2026-74800: SiYuan Stored XSS via Asset Upload Enables Full Kernel API Access
SiYuan before 3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers, enabling stored XSS with full kernel API access.
- Security
WordPress ARForms Plugin Critical PHP Object Injection — CVE-2024-13784
A critical unauthenticated PHP object injection flaw in the ARForms WordPress plugin (CVSS 9.8) allows arbitrary code execution via deserialization.
- Security
CVE-2026-19961: Critical Buffer Overflow in Edimax EW-7478APC Wireless Router
A CVSS 9.9 buffer overflow in the Edimax EW-7478APC 1.04 allows unauthenticated remote code execution via the formWlSiteSurvey endpoint.
- Security
SiYuan API Token Brute-Force via Missing Rate Limiting — CVE-2026-73056
SiYuan's CheckAuth() middleware has no rate limiting, allowing unauthenticated attackers to brute-force API tokens and gain full admin access (CVSS 9.8).
- Security
Scriban .NET Template Engine Access-Modifier Bypass — CVE-2026-73061
Scriban's TypedObjectAccessor fails to enforce setter visibility, letting template code write private and init-only .NET properties (CVSS 9.8 Critical).
- Security
CVE-2026-18855: WordPress Link Library Plugin Arbitrary File Deletion
Critical CVSS 9.1 flaw in WordPress Link Library plugin allows unauthenticated attackers to delete arbitrary server files, risking full site takeover.
- Security
CVE-2026-19598: WordPress Pods Plugin Privilege Escalation via Authorization Bypass
CVSS 9.8 flaw in WordPress Pods plugin lets unauthenticated users escalate privileges via a flawed AJAX authorization router in versions up to 3.3.9.
- Security
CVE-2026-73041: SiYuan XSS via PDF Annotation Fields Grants Full Node.js Access
Critical CVSS 9.0 XSS in SiYuan's PDF annotation renderer allows script injection with full Node.js access on affected versions before v3.7.4.
- Security
CVE-2026-73043: SiYuan RCE via Template Calculation Operator
Critical RCE in SiYuan note-taking app. Unsanitized Go templates allow script injection for all versions before v3.7.4.
- News
Microsoft's Patch Tuesday Deluge Continues With August 2026 Updates
Microsoft's August 2026 Patch Tuesday drops critical fixes including a CVSS 9.8 Windows DNS RCE requiring no user interaction.
- Security
CVE-2026-50523: Microsoft PowerShell Local Command Injection Vulnerability
A command injection flaw in Microsoft PowerShell allows authorized local attackers to execute arbitrary code via improper input neutralization.
- Security
CVE-2026-63700: Dell Wyse Management Suite Privilege Escalation
Dell patches a high-severity privilege escalation flaw in Wyse Management Suite allowing local attackers to achieve full system compromise.
- Security
CVE-2026-72811: SiYuan SQL Injection in Backlink Search Scores Perfect 10.0
SiYuan note-taking app up to v3.7.2 is vulnerable to SQL injection via stored block metadata in the backlink search query path.
- Security
CVE-2026-72819: Grav CMS RCE via ZIP Upload Bypass in Flex Objects Plugin
Grav CMS before 2.0.13 allows authenticated users to achieve RCE by bypassing filename validation with PHP-laden ZIP files.
- Security
CVE-2026-72822: Grav API Plugin 2FA Scope Bypass Allows Admin Account Takeover
Grav API plugin before 1.0.13 fails to enforce API key scope caps on the disable2fa endpoint, enabling privilege escalation.
- Security
CVE-2026-72824: Grav API Plugin Twig Toggle Bypass Escalates Least-Privilege Keys
Grav API plugin before 1.0.13 lets low-privilege API keys enable Twig processing on pages via a broken scope gate in PagesController.
- Security
CVE-2026-73683: Laravel Socialite Facebook OIDC Authentication Bypass
Laravel Socialite's Facebook provider is vulnerable to OIDC id_token replay attacks due to missing nonce validation in getUserByOIDCToken().
- Security
CVE-2026-12949: Critical Account Takeover in WordPress Wishlist Member Plugin
Critical CVSS 9.8 flaw in WordPress Wishlist Member plugin allows unauthenticated account takeover in versions up to 3.34.1.
- Security
CVE-2026-15413: WordPress 'Link Factory' Plugin Is an Intentional Backdoor (CVSS 10.0)
The Link Factory WordPress plugin is a supply-chain backdoor. Operator-controlled REST API lets attackers run arbitrary commands. Remove it immediately.
- Security
CVE-2026-17482: Critical RCE in IBM Documentation Offline
IBM Documentation Offline versions 1.0.0–1.4.1 contain a critical path traversal flaw allowing remote code execution with a CVSS score of 9.8.
- Security
CVE-2026-28154: Reflected XSS in WooCommerce WordPress Themes
High-severity reflected XSS in Samex and M.Anh WooCommerce themes allows attackers to inject malicious scripts via crafted URLs.
- Security
CVE-2026-59500: Priority Portal Generator Authentication Bypass — CVSS 10.0
Maximum severity CVE in Priority ERP's portal addon allows unauthenticated remote attackers to bypass authentication entirely. Patch immediately.
- Security
CVE-2026-59504: Priority Portal Generator Client-Side Security Bypass (CVSS 9.1)
Critical flaw in Soft Solutions' Priority ERP portal addon lets remote attackers bypass server-side security controls. Upgrade to Priwall v3.
- News
Adobe Patches Three CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe's August 2026 patch cycle fixes 3 maximum-severity RCE vulnerabilities across ColdFusion and Campaign Classic. Priority 1 — patch within 72 hours.
- News
Critical VMware vCenter RCE Flaw Exploited for Reverse SSH Access
CVE-2026-59310 is under active exploitation just 5 days after disclosure, with 361 victims across 47 countries receiving reverse SSH backdoors.
- Security
CVE-2026-11325: Cloudflare pages-action GitHub Actions RCE
High-severity RCE in cloudflare/pages-action exposes CI/CD credentials. Migrate to wrangler-action before Sept 18, 2026 sunset.
- Security
CVE-2026-19001: MongoDB BI Connector ODBC Driver Buffer Overflow (CVSS 9.8)
Critical CVSS 9.8 buffer overflow in the MongoDB BI Connector ODBC Driver may allow remote code execution via long metadata names.
- News
Cisco Warns of ASA and FTD VPN Flaw Actively Exploited to Crash Firewalls
CVE-2026-20349 (CVSS 8.6) in Cisco ASA and FTD allows unauthenticated remote attackers to crash SSL VPN devices via crafted HTTP requests — no workaround...
- News
Microsoft Plugs Nearly 400 Security Holes in August 2026 Patch Tuesday
Microsoft's August 2026 Patch Tuesday addresses 398 CVEs including a WinSock zero-day actively exploited in the wild and two publicly disclosed flaws.
- News
SAP Commerce Cloud RCE Flaw Lets Unauthenticated Attackers Execute Arbitrary Code
CVE-2026-58231 scores CVSS 10.0 in SAP Commerce Cloud Data Hub Adapter — patch immediately as unauthenticated RCE with full system compromise is possible.
- Security
PicketLink SAML Authentication Bypass — Forged Assertions Accepted Without Validation
CVE-2026-10579 (CVSS 9.8): PicketLink Federation's SAML handler accepts forged assertions, allowing unauthenticated remote attackers to authenticate as...
- Security
CVE-2026-18961: WordPress VentraConnect Plugin Authentication Bypass
High-severity auth bypass in the VentraConnect Social Login plugin allows unauthenticated attackers to take over any WordPress account.
- News
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
A maximum-severity zero-day vulnerability in Metabase — the widely used open-source business analytics platform — allows remote attackers to gain...
- Security
CVE-2026-47754: Reserved Vulnerability Under Coordinated Disclosure
CVE-2026-47754 is assigned but under coordinated disclosure embargo — details restricted pending vendor notification and patch availability.
- Security
CVE-2026-14206: HT Contact Form WordPress Plugin Exposes Visitor PII to Unauthenticated Attackers
The HT Contact Form plugin before 2.9.3 allows any unauthenticated user to read saved form drafts containing visitor names, emails, and physical addresses...
- Security
CVE-2026-19384: SQL Injection in SourceCodester Simple Doctors Appointment System
A remotely exploitable SQL injection vulnerability in SourceCodester Simple Doctors Appointment System 1.0 allows unauthenticated attackers to manipulate...
- News
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
A critical pre-auth RCE vulnerability in Progress Kemp LoadMaster has been added to CISA's Known Exploited Vulnerabilities catalog following 792...
- News
Truck Brake Controller's Safety Recall Doubled as Hidden Security Fix
A Black Hat USA 2026 presentation revealed that a 2024 safety recall covering 450,000 heavy trucks from Volvo, International, and Paccar secretly patched...
- Security
CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability
Critical unauthenticated command injection in Progress LoadMaster lets attackers run arbitrary OS commands. Listed on the CISA KEV catalog — patch immediately.
- Security
Apache CXF OAuth2 Scope Injection Lets Clients Claim Admin Privileges
A critical flaw in Apache CXF's OAuth2 Dynamic Client Registration endpoint stores attacker-supplied scope values verbatim, allowing malicious clients to...
- Security
Apache CXF JMS Deserialization Flaw Allows Unauthenticated RCE
A critical Java deserialization vulnerability in Apache CXF's JMS transport allows any attacker who can reach a JMS destination to trigger remote code...
- Security
CVE-2026-12713: Critical SQL Injection in WPCargo Track & Trace Plugin
An unauthenticated SQL injection vulnerability (CVSS 9.1) in the WPCargo Track & Trace WordPress plugin before version 8.0.4 allows attackers to read and...
- News
CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited
CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on August 5, 2026 — a critical Langflow RCE, an Apache Tomcat encryption...
- Security
CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
A fail-open regression in Apache Tomcat's EncryptInterceptor allows attackers to bypass cluster communication encryption, exposing sensitive data in...
- Security
CVE-2026-9198: IBM Langflow Code Injection Vulnerability
A critical unauthenticated code injection flaw in Langflow 1.0.0–1.10.0 allows attackers to chain two API endpoints to obtain a SUPERUSER token and...
- Security
CVE-2026-65321: PyAthena SQL Injection via Improper Quote Escaping
A critical SQL injection vulnerability in PyAthena prior to 3.35.4 allows unauthenticated attackers to inject arbitrary SQL through improper...
- Security
CVE-2026-68579: FreeRDP Heap Buffer Overflow in Windows Clipboard Client
A critical heap-based buffer overflow in FreeRDP's Windows clipboard client allows an OLE paste consumer to trigger memory corruption, scoring CVSS 9.6....
- Security
CVE-2026-13339: CubeWP Framework WordPress Plugin Directory Traversal (CVSS 7.5)
A high-severity directory traversal vulnerability in the CubeWP Framework plugin for WordPress allows unauthenticated attackers to read arbitrary files on...
- Security
CVE-2026-8457: WooCommerce Social Login Authentication Bypass (CVSS 9.8)
A critical authentication bypass vulnerability in the WooCommerce - Social Login WordPress plugin allows unauthenticated attackers to log in as any...
- News
Rails Patches Critical Active Storage Flaw with RCE Potential (CVE-2026-66066)
A critical vulnerability in Ruby on Rails Active Storage allows unauthenticated attackers to read arbitrary server files via crafted image uploads —...
- Security
CVE-2026-15414: WooCommerce Subscriptions Plugin Privilege Escalation (CVSS 8.8)
A high-severity privilege escalation vulnerability in the Subscriptions for WooCommerce plugin allows authenticated users to elevate their role to...
- Security
CVE-2026-17561: Critical Code Injection in Logsign SIEM
A critical code injection vulnerability in Logsign SIEM (CVSS 9.8) allows unauthenticated remote code execution on affected systems running versions prior...
- Security
CVE-2026-3141: WordPress FormGent Plugin Unauthorized File Deletion (CVSS 9.1)
A critical unauthenticated file deletion vulnerability in the FormGent WordPress plugin allows attackers to delete arbitrary files without authentication,...
- Security
CVE-2025-65336: Critical SQL Injection in Fruits Bazar PHP Ecommerce
CVSS 9.8 SQL injection vulnerability in the show_price_by_pdtId.php endpoint of the Fruits Bazar PHP/MySQLi ecommerce project allows unauthenticated...
- Security
CVE-2025-69941: Critical SQL Injection in Tailor Management System — Measurement Endpoint
CVSS 9.8 SQL injection in SourceCodester Tailor Management System 1.0 allows unauthenticated attackers to read, modify, or delete all database records...
- Security
CVE-2025-69947: Critical SQL Injection in Tailor Management System — Customer Edit Endpoint
CVSS 9.8 SQL injection in SourceCodester Tailor Management System 1.0 exposes full customer records through an unsanitized id parameter in...
- Security
CVE-2026-11707: IBM WebSphere Application Server Admin Console XSS (CVSS 9.3)
Critical cross-site scripting vulnerability in IBM WebSphere Application Server's administrative console login page enables unauthenticated remote...
- Security
CVE-2026-15435: IBM App Connect Enterprise Path Traversal — Arbitrary File Write (CVSS 9.8)
Critical path traversal vulnerability in IBM App Connect Enterprise allows unauthenticated remote attackers to write arbitrary files on the system using...
- Security
CVE-2026-43830: Critical CVSS 9.8 Vulnerability — Details Embargoed
A newly published critical vulnerability (CVSS 9.8) registered as CVE-2026-43830 appeared in NVD on July 31, 2026 with full details under embargo....
- Security
CVE-2026-52539: Hardcoded JWT Secret in Outstatic CMS Enables Admin Takeover
Outstatic CMS versions up to and including 2.1.9 ship a publicly known default JWT signing secret, allowing unauthenticated attackers to forge valid admin...
- Security
CVE-2026-16610: Critical RCE in WordPress Admin & Site Enhancements Pro Plugin
A CVSS 9.8 unauthenticated remote code execution vulnerability in the Admin and Site Enhancements (ASE) Pro WordPress plugin allows attackers to execute...
- Security
CVE-2026-48449: Maximum Severity RCE in Adobe Campaign Classic
Adobe Campaign Classic is affected by a CVSS 10.0 Incorrect Authorization vulnerability enabling arbitrary code execution with no user interaction...
- News
New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands
A critical remote code execution vulnerability in Gitea, tracked as CVE-2026-60004 with a CVSS score of 9.8, allows any user with ordinary repository...
- News
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
A maximum-severity flaw (CVE-2026-59726, CVSS 10.0) in the Ruflo open-source agent harness for Claude Code and OpenAI Codex allows unauthenticated remote...
- Security
CVE-2026-13423: Streamit WordPress Theme Allows Unauthenticated Arbitrary PHP Function Execution
The Streamit WordPress theme through version 4.5.0 exposes an unauthenticated AJAX route with no authorization or nonce verification, letting any...
- Security
CVE-2026-51252: Critical Buffer Overflow in ESP32-audioI2S MP3 Decoder
A critical CVSS 9.8 heap-based buffer overflow in the schreibfaul1 ESP32-audioI2S library allows an attacker to corrupt embedded device memory via a...
- Security
CVE-2026-51259: Integer Overflow in ESP32-audioI2S Causes PSRAM Buffer Overflow
A critical unsigned integer overflow in schreibfaul1's ESP32-audioI2S 3.4.5 causes undersized PSRAM buffer allocation, enabling out-of-bounds memory...
- Security
CVE-2026-51260: Unsafe memcpy in ESP32-audioI2S Enables Remote Heap Buffer Overflow
A critical CVSS 9.4 heap buffer overflow in schreibfaul1 ESP32-audioI2S 3.4.5 allows remote attackers to corrupt heap memory by serving a malicious audio...
- Security
CVE-2026-63227: Koollab LMS SCORM File Upload Allows Webshell Deployment and RCE
A CVSS 9.9 critical vulnerability in Koollab LMS allows authenticated module designers to upload a SCORM package containing a PHP webshell to a publicly...
- Security
CVE-2026-63232: Koollab LMS SQL Injection and RCE via Unsafe Deserialisation
A critical CVSS 9.9 vulnerability in Koollab LMS allows authenticated attackers to exploit SQL injection and unsafe PHP deserialisation in the assessment...
- Security
CVE-2026-28911: macOS Critical Memory Corruption via Malicious App
A critical memory corruption vulnerability in macOS allows a malicious application to corrupt memory of a system process. Apple patched the flaw in macOS...
- Security
CVE-2026-28928: Apple Platform Use-After-Free Causes Unexpected System Termination
A critical use-after-free vulnerability affects iOS, iPadOS, macOS, tvOS, and watchOS. A malicious app can trigger unexpected system termination. Apple...
- Security
CVE-2026-28982: macOS Race Condition Allows Remote Kernel Memory Corruption
A critical race condition in macOS enables a remote attacker to cause unexpected system termination or corrupt kernel memory. Apple patched the flaw in...
- Security
CVE-2026-48144: Apache Thrift c_glib TLS Certificate Host Mismatch (CVSS 9.1)
A critical TLS hostname verification flaw in Apache Thrift's c_glib bindings allows network-positioned attackers to conduct man-in-the-middle attacks...
- News
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
A high-severity expression sandbox escape in n8n allows authenticated workflow editors to execute operating-system commands on the host server. Security...
- News
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
Attackers are actively chaining CVE-2026-60137 and CVE-2026-63030 just three days after disclosure, targeting one of the largest attack surfaces on the...
- News
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patch Available
A critical unpatched remote code execution flaw in Alibaba's Fastjson 1.x library is being actively exploited in the wild. Tracked as CVE-2026-16723, the...
- News
Russian APT 'Laundry Bear' Exploited Zimbra Zero-Day with Half-Click Email Attack
Russia-backed Laundry Bear (Void Blizzard/TA488) exploited CVE-2025-66376 — a stored XSS flaw in Zimbra's Classic UI — to compromise US, Ukrainian, and...
- Security
CVE-2026-15962: PHP Object Injection in Fluent Forms Pro (CVSS 8.8)
A high-severity PHP Object Injection vulnerability in the Fluent Forms Pro Add On Pack plugin for WordPress allows authenticated attackers with...
- Security
CVE-2026-57989: Microsoft Edge Origin Validation Error Allows Remote Information Disclosure
A high-severity origin validation error in Microsoft Edge (Chromium-based) enables an unauthenticated remote attacker to disclose sensitive information...
- Security
CVE-2026-57990: Microsoft Edge Exposes Local Files and Directories to Remote Attackers
A high-severity access control flaw in Microsoft Edge (Chromium-based) allows unauthenticated remote attackers to access files or directories that should...
- Security
CVE-2026-10818: WPForms Pro Arbitrary File Upload — Unauthenticated RCE
A high-severity vulnerability in WPForms Pro allows unauthenticated attackers to upload malicious files and achieve remote code execution. File type...
- Security
CVE-2026-56163: Critical Auth Bypass in Azure Kubernetes Service Allows Privilege Escalation
A CVSS 10.0 vulnerability in Microsoft Azure Kubernetes Service allows unauthenticated attackers to escalate privileges over the network due to missing...
- Security
CVE-2026-57106: Critical SSRF in SAP Data Quality Enables Unauthenticated Privilege Escalation
A CVSS 10.0 server-side request forgery vulnerability in SAP Data Quality Management allows an unauthenticated attacker to escalate privileges over the...
- Security
CVE-2026-12877: Critical SQL Injection in WordPress Project Management Plugin
An unauthenticated SQL injection flaw with a CVSS score of 9.1 affects the Project Management, Bug and Issue Tracking Plugin for WordPress before version...
- Security
CVE-2026-15981: WordPress SAML SSO Authentication Bypass (CVSS 9.8)
A critical authentication bypass in the WordPress SAML Single Sign On plugin allows unauthenticated attackers to log in as any user, including...
- Security
CVE-2026-47724: nebula-mesh API Authorization Bypass Enables Cross-Tenant Takeover (CVSS 9.9)
A critical authorization bypass in nebula-mesh, the self-hosted control plane for Slack's Nebula VPN, allows any holder of a non-admin operator API key to...
- News
Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
A high-severity path traversal vulnerability in the open-source developer platform Windmill (CVE-2026-29059, CVSS 7.5) is under active exploitation,...
- Security
CVE-2026-14291: WordPress Security Ninja Premium 2FA Authentication Bypass
The Security Ninja Premium WordPress plugin before version 5.290 contains a critical authentication flaw that allows attackers to bypass two-factor...
- Security
CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a critical deserialization of untrusted data vulnerability allowing unauthenticated attackers to execute arbitrary code over...
- News
Critical Palo Alto VPN Bug Now Exploited by Qilin Ransomware Gang
The Qilin ransomware gang is actively exploiting a critical PAN-OS GlobalProtect authentication bypass vulnerability to breach enterprise networks,...
- News
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
Attackers are exploiting two chained critical WordPress vulnerabilities that enable unauthenticated remote code execution. A public exploit has triggered...
- Security
CVE-2026-13439: WordPress Easy Form Builder Unauthenticated Privilege Escalation (CVSS 9.8)
A critical unauthenticated privilege escalation vulnerability in the Easy Form Builder by WhiteStudio WordPress plugin allows attackers to reset admin...
- News
Estee Lauder Discloses Data Breach via Oracle E-Business Suite Flaw
Cosmetics giant Estee Lauder is notifying customers and employees of a data breach after threat actors exploited a vulnerability in Oracle E-Business...
- News
SonicWall SMA1000 Flaws Exploited as Zero-Days to Push Custom Malware
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks before patches were available, allowing threat...
- News
SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
Threat actor UTA0533 exploited two SonicWall zero-day vulnerabilities — CVE-2026-15409 and CVE-2026-15410 — to deploy custom malware against targets weeks...
- Security
CVE-2026-16227: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate...
- Security
CVE-2026-16228: SQL Injection in SourceCodester Class and Exam Timetabling System via edit_schoolyr.php
A second SQL injection flaw in SourceCodester Class and Exam Timetabling System 1.0 exposes the /edit_schoolyr.php endpoint to remote unauthenticated...
- News
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
F5 has patched CVE-2026-42533, a critical heap buffer overflow in NGINX that allows unauthenticated remote attackers to crash worker processes and...
- News
Records Are Made to Be Broken: Patch Tuesday July 2026 Raises Triage Stakes
Microsoft's July 2026 Patch Tuesday set a new record with 622 CVEs addressed in a single release, including three actively exploited zero-days and more...
- Security
CVE-2026-16152: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability has been disclosed in SourceCodester Class and Exam Timetabling System 1.0. The flaw in /edit_rooma.php...
- Security
CVE-2026-16154: SQL Injection in SourceCodester Timetabling Room Management
A second SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 has been disclosed, this time affecting the /edit_room1.php...
- Security
CVE-2026-47868: VMware Avi Load Balancer Local Privilege Escalation
A local privilege escalation vulnerability in VMware Avi Load Balancer allows malicious local users to execute code as root. Versions 22.x through 32.1.1...
- Security
CVE-2026-47870: VMware Avi Load Balancer Authenticated Remote Code Execution
An authenticated privilege escalation flaw in VMware Avi Load Balancer enables network-connected users to execute remote code. CVSS 7.1 High — all...
- Security
CVE-2026-47871: VMware Avi Load Balancer Directory Traversal
A directory traversal vulnerability in VMware Avi Load Balancer allows authenticated network users to bypass file path validation and access arbitrary...
- Security
CVE-2026-47865: Critical Authentication Bypass in VMware Avi Load Balancer
A CVSS 9.8 authentication bypass vulnerability allows unauthenticated remote attackers to gain full access to the VMware Avi Load Balancer Control Plane....
- Security
CVE-2026-47866: Authorization Bypass in VMware Avi Load Balancer
A CVSS 8.3 authorization bypass vulnerability in VMware Avi Load Balancer allows low-privileged authenticated users to access restricted Control Plane...
- Security
CVE-2026-47867: Remote Code Execution via Code Injection in VMware Avi Load Balancer
A CVSS 8.7 code injection vulnerability in VMware Avi Load Balancer enables high-privileged authenticated attackers to execute arbitrary code on the...
- Security
CVE-2026-47869: Second RCE Code Injection Path in VMware Avi Load Balancer
Broadcom discloses a second CVSS 8.7 code injection vulnerability in VMware Avi Load Balancer. CVE-2026-47869 shares the same vector and impact as...
- Security
CVE-2026-63093: Cursor for Windows Binary Planting Allows RCE via Malicious Git Repository
A high-severity binary planting vulnerability in Cursor for Windows 3.2.16 enables remote attackers to achieve arbitrary code execution by placing a rogue...
- Security
CVE-2026-42533: NGINX Memory Corruption via Map Directive Regex (CVSS 8.1)
A vulnerability in NGINX Plus and NGINX Open Source allows map directives using regex matching with capture variables to trigger memory corruption when...
- Security
CVE-2026-56699: Critical NDJSON Injection in Wazuh Manager (CVSS 10.0)
CVSS 10.0 flaw in Wazuh Manager 5.0 beta lets enrolled agents inject NDJSON ops into OpenSearch under admin credentials, deleting logs and corrupting alerts.
- Security
CVE-2026-61736: LightRAG Critical CORS Credential Bypass (CVSS 9.3)
LightRAG's default server configuration combines CORS_ORIGINS=* with allow_credentials=True, allowing any origin to make credentialed cross-origin...
- Security
CVE-2026-13221: Perl Regex Trie Overflow Produces Silent Incorrect Matches
A critical flaw in Perl through 5.43.9 causes regex alternations with more than 65,535 branches to silently produce incorrect matches, potentially...
- Security
CVE-2026-14453: Critical SSTI to RCE in Centreon Open Tickets (CVSS 9.6)
A critical Server-Side Template Injection vulnerability in Centreon's centreon-open-tickets module allows unauthenticated attackers to achieve Remote Code...
- Security
CVE-2026-57433: Perl Storable Signed Integer Overflow in SX_HOOK Deserialization
A CVSS 9.8 signed integer overflow in Perl's Storable module (before 3.41) allows a crafted SX_HOOK record to wrap an I32_MAX item count to -1, corrupting...
- Security
CVE-2026-58065: Apache Airflow Git Provider Disables SSH Host Key Verification
The Apache Airflow Git provider runs git-over-SSH with StrictHostKeyChecking=no by default, allowing a network-position attacker to silently impersonate...
- Security
CVE-2026-61500: Rejetto HFS Session Cookie Key Derived from Math.random()
Rejetto HFS 3.0.0–3.2.0 derives its session-cookie signing key from JavaScript's non-cryptographic Math.random(), and leaks generator outputs to...
- Security
CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco IOS 12.4 contains multiple CSRF vulnerabilities that allow remote attackers to execute arbitrary commands. The flaw has been added to the CISA Known...
- Security
CVE-2026-11964: WordPress User Registration Plugin PayPal Webhook Bypass
The User Registration & Membership WordPress plugin before 5.2.2 fails to verify PayPal webhook signatures, allowing unauthenticated attackers to forge...
- Security
CVE-2026-15488: Unrestricted File Upload in shiroiAdmin Enables Remote Code Execution
A high-severity unrestricted file upload vulnerability in shiroiAdmin versions 1.1 and 1.3 allows unauthenticated remote attackers to upload PHP webshells...
- Security
CVE-2026-15489: SQL Injection in TOKO-ONLINE-ROTI Login Endpoint
A high-severity SQL injection vulnerability in the TOKO-ONLINE-ROTI bakery management system allows remote attackers to manipulate the login.php Username...
- Security
CVE-2026-15490: SQL Injection in TOKO-ONLINE-ROTI Product Add Endpoint
A high-severity SQL injection vulnerability in the TOKO-ONLINE-ROTI PHP bakery system allows remote attackers to manipulate the kode_produk and kd_cs...
- Security
CVE-2026-60090: PraisonAI SQL Injection via Unvalidated Dimension Parameter in Vector Store Backends
A CVSS 9.8 critical SQL injection vulnerability in PraisonAI before 4.6.78 allows attackers to exploit the unvalidated dimension argument in PGVector and...
- Security
CVE-2026-61445: PraisonAI AICoder Arbitrary File Write and Command Injection via LLM Tool Calls
A CVSS 9.9 critical vulnerability in PraisonAI before 4.6.78 allows attackers to write files to arbitrary filesystem locations and execute arbitrary OS...
- Security
CVE-2026-61447: PraisonAI CodeAgent Remote Code Execution via Unsandboxed Python Execution
A CVSS 10.0 critical vulnerability in PraisonAI before 1.6.78 allows attackers to achieve remote code execution by injecting malicious prompts that...
- Security
CVE-2026-13353: WordPress WP Ultimate CSV Importer RCE via MappedFields Parameter
A critical CVSS 8.8 remote code execution vulnerability in WP Ultimate CSV Importer allows unauthenticated attackers to execute arbitrary PHP code on...
- Security
CVE-2026-48939: iCagenda Unrestricted File Upload Allows PHP Code Execution
A critical unrestricted file upload vulnerability in the iCagenda Joomla event calendar plugin allows unauthenticated attackers to upload arbitrary PHP...
- Security
CVE-2026-56765: Vikunja Authorization Bypass Enables Permission Escalation
A critical authorization flaw in Vikunja task manager (CVSS 9.8) exposes share hashes via LinkSharing.ReadAll and allows task attachment access through...
- Security
CVE-2026-59792: JetBrains IntelliJ IDEA Remote Code Execution via Path Traversal
A critical RCE vulnerability (CVSS 9.6) in JetBrains IntelliJ IDEA before 2026.1.4 allows code execution through path traversal in project workspace ID...
- Security
CVE-2026-15158: WordPress Blocksy Companion Arbitrary File Upload (CVSS 9.8)
A critical arbitrary file upload vulnerability in the Blocksy Companion WordPress plugin (versions up to 2.1.46) allows unauthenticated attackers to...
- Security
CVE-2026-2342: ValeApp Stored Cross-Site Scripting (CVSS 9.3)
A critical stored XSS vulnerability in OceanicSoft's ValeApp allows attackers to inject persistent JavaScript payloads that execute in every victim's...
- Security
CVE-2026-56291: Balbooa Forms Unrestricted File Upload Enables Full RCE
A critical unauthenticated file upload vulnerability in Balbooa Forms for Joomla allows attackers to upload executable files and achieve full remote code...
- Security
CVE-2026-5955: BiEticaret E-Commerce SQL Injection (CVSS 9.8)
A critical SQL injection vulnerability in Inrove Software's BiEticaret e-commerce platform (versions before v3.3.57) allows unauthenticated attackers to...
- Security
CVE-2026-15062: Critical SQL Injection in Snowflake Snowpark Python SDK
A critical-severity SQL injection vulnerability (CVSS 9.6) in the Snowflake Snowpark Python SDK allows authenticated low-privilege users to execute SQL...
- Security
CVE-2026-35210: OpenCTI Authorization Bypass Allows Confidence Level and Object Marking Circumvention
An authentication bypass vulnerability in OpenCTI prior to 7.260326.0 allows any authenticated user with KNOWLEDGE_KNUPDATE permission to bypass...
- Security
CVE-2026-47831: Weak RNG in BOSH Windows Stemcell Builder Enables Remote Password Prediction
A cryptographically weak random number generator in the GenerateRandomPassword function of bosh-windows-stemcell-builder allows remote attackers to...
- Security
CVE-2026-12153: WP Learn Manager Plugin — Unauthenticated Authorization Bypass Allows Plugin Installation
A critical CVSS 9.8 authorization bypass in the WP Learn Manager WordPress plugin allows unauthenticated attackers to install and activate arbitrary...
- Security
CVE-2026-13019: Esri ArcGIS Portal Critical Unauthenticated API Access
A critical missing authentication vulnerability in Esri Portal for ArcGIS 12.1 and earlier allows remote unauthenticated attackers to access protected API...
- Security
CVE-2026-14487: WordPress Simple Coherent Form Plugin — Critical Unauthenticated File Deletion
A critical CVSS 9.1 vulnerability in the Simple Coherent Form WordPress plugin allows unauthenticated attackers to delete arbitrary files on the server,...
- Security
CVE-2026-48908: JoomShaper SP Page Builder Unrestricted File Upload RCE
A critical unrestricted file upload vulnerability in JoomShaper's SP Page Builder allows unauthenticated attackers to upload arbitrary PHP files and...
- Security
CVE-2026-9695: DELMIA Apriso Manufacturing MES — Improper Authentication Enables Privileged Server Access
A critical CVSS 9.8 improper authentication vulnerability in Dassault Systèmes DELMIA Apriso (releases 2020–2026) allows unauthenticated attackers to gain...
- Security
CVE-2026-9701: WordPress Eventer Plugin — Insecure Password Reset Enables Account Takeover
A critical CVSS 9.8 vulnerability in the Eventer WordPress plugin exposes plaintext password reset keys in user meta, allowing unauthenticated attackers...
- Security
CVE-2025-53827: ownCloud Updater Exposes Dangerous Method (CVSS 9.1)
A critical vulnerability in ownCloud Core's Updater component exposes a dangerous method to administrators, enabling potential remote code execution on...
- Security
CVE-2024-6228: WordPress WANotifier Plugin Local File Inclusion
A local file inclusion vulnerability in the WANotifier WordPress plugin (before v2.6) allows any authenticated subscriber-level user to include and...
- Security
CVE-2026-14771: SQL Injection in SourceCodester Class and Exam Timetabling System
An unauthenticated remote SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows attackers to manipulate the id...
- Security
CVE-2026-14635: Unrestricted File Upload RCE in CodeIgniter Ecommerce Bootstrap
A high-severity unrestricted file upload vulnerability in the kirilkirkov Ecommerce-CodeIgniter-Bootstrap allows authenticated vendor users to upload...
- Security
CVE-2026-14637: PHP Deserialization RCE in CodeIgniter Ecommerce Bootstrap Shopping Cart
A high-severity PHP deserialization vulnerability in the kirilkirkov Ecommerce-CodeIgniter-Bootstrap allows attackers to inject malicious serialized...
- Security
CVE-2026-14641: Remote SQL Injection in SourceCodester Class and Exam Timetabling System
A high-severity SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to dump the...
- Security
CVE-2026-14642: Remote SQL Injection in SourceCodester Timetabling System edit_class2.php
A high-severity SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to fully...
- News
New 'Bad Epoll' Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android
A use-after-free bug in the Linux kernel's epoll subsystem — CVE-2026-46242 — lets any local user escalate to root on Linux 6.4+ with ~99% reliability. A...
- Security
CVE-2026-4321: Critical SQL Injection in Raera Destekz Plugin (No Patch Available)
A CVSS 9.8 critical SQL injection in the Destekz plugin by Raera - Ankara Web Design allows unauthenticated remote attackers full database access. The...
- Security
CVE-2026-49814: Dell PowerProtect Data Domain OS Command Injection
A high-severity OS command injection vulnerability in Dell PowerProtect Data Domain allows authenticated remote attackers to execute arbitrary commands...
- News
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
Anubis ransomware affiliates are exploiting CVE-2025-5777 (Citrix Bleed 2) for initial access while pairing BYOVD techniques and stolen supply chain...
- News
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
CISA has added a high-severity Microsoft SharePoint Server remote code execution vulnerability to its Known Exploited Vulnerabilities catalog following...
- Security
CVE-2026-14198: Fastify Middie Middleware Path Bypass (CVSS 9.1)
Critical path bypass vulnerability in @fastify/middie versions 9.1.0 through 9.3.2 allows attackers to evade middleware protection by exploiting a %2F...
- Security
CVE-2026-52186: Critical SQL Injection RCE in UTT nv518G Router
A critical SQL injection vulnerability (CVSS 9.8) in the UTT nv518G router allows unauthenticated remote attackers to execute arbitrary code via the...
- News
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
A critical pre-authentication remote code execution flaw in Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6) is under active exploitation attempts,...
- Security
CVE-2025-36359: IBM DevOps Session Hijacking Vulnerability (CVSS 8.1)
IBM DevOps Automation and IBM DevOps Loop fail to invalidate session IDs after expiration, allowing authenticated attackers to impersonate other users via...
- Security
CVE-2026-12923: YouTube Showcase WordPress Plugin Arbitrary Function Call
A high-severity arbitrary function call vulnerability in the YouTube Showcase plugin allows authenticated attackers to invoke arbitrary PHP functions via...
- Security
CVE-2026-9711: Critical SQL Injection in EventON WordPress Plugin (CVSS 9.8)
A critical unauthenticated SQL injection vulnerability in the EventON WordPress Virtual Event Calendar Plugin affects versions up to 5.0.11, exposing...
- News
BlueHammer Vulnerability Exploited in Ransomware Attacks Before Microsoft Patch
The Microsoft Defender vulnerability CVE-2026-33825 was actively exploited as a zero-day by ransomware groups before Microsoft had the chance to release a...
- News
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are actively weaponizing CVE-2026-33017, a critical unauthenticated RCE flaw in Langflow, to deploy a Monero miner via the lambsys...
- News
Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
A critical CVSS 9.8 authentication bypass vulnerability in Oracle E-Business Suite's Payments module is being actively exploited in the wild, according to...
- Security
CVE-2026-12073: ProfileGrid WordPress Plugin Critical Privilege Escalation
A critical CVSS 9.8 vulnerability in the ProfileGrid WordPress plugin allows unauthenticated attackers to take over any user account and escalate...
- Security
CVE-2026-13550: SQL Injection in itsourcecode Baptism Information Management System 1.0
A high-severity SQL injection vulnerability has been identified in itsourcecode Baptism Information Management System 1.0, allowing remote attackers to...
- Security
CVE-2026-13551: SQL Injection in itsourcecode Baptism Information Management System 1.0 (editBaptism.php)
A second high-severity SQL injection vulnerability has been disclosed in itsourcecode Baptism Information Management System 1.0, this time affecting the...
- Security
CVE-2026-53434: Critical Apache Tomcat CRL Configuration Flaw (CVSS 9.1)
A critical vulnerability in Apache Tomcat's FFM/Panama TLS connector silently ignores invalid or malformed CRL configurations, causing the server to...
- Newsletter
June 30 Digest: BlueHammer Zero-Day, Ransomware Goes Corporate, AI Supply Chain Risks & Nation-State ICS Threats
A Microsoft Defender zero-day fuels ransomware before any patch exists; researchers dissect how syndicate groups run HR departments and tiered pricing;...
- News
Critical SimpleHelp Flaw Exploited to Deploy Djinn Infostealer
Hackers are actively exploiting CVE-2026-48558 in SimpleHelp remote support software to deploy Djinn Stealer, a previously undocumented cross-platform...
- News
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A heap overflow in libssh2's transport layer allows a malicious SSH server to achieve pre-authentication RCE against any connecting client. All versions...
- Security
CVE-2026-13521: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability affects SourceCodester Class and Exam Timetabling System 1.0 via the course_year_section parameter in...
- Security
CVE-2026-13526: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection flaw in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate...
- Security
CVE-2026-49048: Critical SQL Injection in JoomCCK Joomla Extension
A critical unauthenticated SQL injection vulnerability (CVSS 9.8) in the JoomCCK Joomla extension allows attackers to read, modify, or delete database...
- News
Why Patch Directives Only Go So Far
Six weeks of undetected access through a compromised VPN appliance exposes a hard truth: patching is necessary but not sufficient. Organisations already...
- Security
CVE-2026-13485: SQL Injection in SourceCodester Class and Exam Timetabling System
A high-severity SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to...
- Security
CVE-2026-13486: SQL Injection in SourceCodester Class and Exam Timetabling System (preview6.php)
A second high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 targets /preview6.php via the...
- Security
CVE-2026-13487: SQL Injection in SourceCodester Timetabling System (/archive.php)
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate the...
- Security
CVE-2026-13488: SQL Injection in SourceCodester Timetabling System (/preview7.php)
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate the...
- Security
CVE-2026-13498: SQL Injection in Restaurant Management System via Password Reset
A high-severity SQL injection vulnerability in yashpokharna2555's restaurant management system allows unauthenticated attackers to exploit the...
- Security
CVE-2026-58053: Newly Disclosed Informational Vulnerability
CVE-2026-58053 was disclosed on June 28, 2026 with an informational severity rating. NVD analysis is pending; no exploitation or vendor advisory has been...
- Security
CVE-2026-8095: WordPress Frontend File Manager Plugin Allows Arbitrary File Deletion
A high-severity authenticated file deletion vulnerability in the nmedia Frontend File Manager Plugin for WordPress allows subscribers to delete any file...
- Security
CVE-2025-55017: Apache IoTDB Critical Path Traversal Vulnerability
Critical path traversal vulnerability (CVSS 9.1) in Apache IoTDB affects versions 1.0.0 through 1.3.5 and 2.0.0 through 2.0.5. Users must upgrade...
- Security
CVE-2025-64152: Apache IoTDB Second Critical Path Traversal Flaw
A second critical path traversal vulnerability (CVSS 9.1) in Apache IoTDB affects versions 1.0.0 through 1.3.5 and 2.0.0 through 2.0.6. Patch to 1.3.6 or...
- Security
CVE-2026-52884: Notepad++ Trusted Directory Bypass via Path Traversal (CVSS 7.8)
A path traversal flaw in Notepad++ v8.9.6.1 allows attackers to bypass the trusted directory plugin verification check using path sequences, potentially...
- Security
CVE-2026-54350: Budibase Unauthenticated Database Read & Write (CVSS 10.0)
A critical CVSS 10.0 flaw in Budibase allows unauthenticated visitors of any published app to read every document in backing database collections and...
- Security
CVE-2026-54352: Budibase Zip Upload Path Traversal Enables Remote Code Execution (CVSS 9.6)
A critical path traversal vulnerability in Budibase's zip upload endpoint allows attackers to write arbitrary files outside the intended temp directory,...
- News
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
CISA has added CVE-2026-12569, a remote code execution flaw in PTC Windchill, to its Known Exploited Vulnerabilities catalog after confirming active...
- Security
CVE-2026-46735: Dell DDPM Mac OS Command Injection Allows Local Privilege Escalation
A high-severity OS command injection flaw in Dell Display and Peripheral Manager for macOS (versions prior to 2.3) allows low-privileged local attackers...
- News
Mandiant Reveals How Cisco SD-WAN Zero-Day CVE-2026-20245 Gained Root Access
Mandiant's post-incident analysis exposes a sophisticated multi-stage attack chain that exploited CVE-2026-20245 to plant a hidden root account on Cisco...
- Security
CVE-2026-12569: PTC Windchill and FlexPLM Remote Code Execution Vulnerability
A critical unauthenticated RCE vulnerability in PTC Windchill and FlexPLM (CVSS 9.3) has been added to CISA's Known Exploited Vulnerabilities catalog,...
- Security
CVE-2026-45688: Rocket.Chat CAS Login MongoDB Operator Injection (CVSS 9.1)
Critical unauthenticated account takeover vulnerability in Rocket.Chat's CAS login handler passes unsanitized client input directly into a MongoDB findOne...
- Security
CVE-2026-45689: Rocket.Chat OAuth Token Hijack via MongoDB Operator Injection (CVSS 9.1)
Critical pre-authentication vulnerability in Rocket.Chat allows any unauthenticated network attacker to obtain a valid OAuth access token for an arbitrary...
- Security
CVE-2026-12485: GeoVision GV-I/O Box 4E UDP Stack Overflow (IP Address Field)
A critical CVSS 10.0 stack-based buffer overflow in the GeoVision GV-I/O Box 4E DVRSearch service allows unauthenticated remote attackers to achieve...
- Security
CVE-2026-12486: GeoVision GV-I/O Box 4E OS Command Injection via libNetSetObj.so
Multiple OS command injection vulnerabilities in GeoVision GV-I/O Box 4E firmware 2.09 allow attackers with network access to execute arbitrary system...
- Security
CVE-2026-12846: GeoVision GV-I/O Box 4E UDP Stack Overflow (Net Mask Field)
A second critical CVSS 10.0 stack-based buffer overflow in GeoVision GV-I/O Box 4E firmware 2.09 — this time in the Net Mask field handling of the...
- News
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
A heap over-read vulnerability introduced in a 1997 FTP parser change allows a malicious co-user of a shared Squid proxy to read other users' cleartext...
- Security
CVE-2025-67038: Lantronix EDS5000 OS Command Injection Vulnerability
A critical OS command injection flaw in the Lantronix EDS5000 serial device server allows unauthenticated attackers to inject arbitrary commands via the...
- News
FFmpeg Fixes PixelSmash Flaw in Widely Used Video Decoder
FFmpeg has patched a critical vulnerability dubbed PixelSmash that could enable remote code execution on Jellyfin servers and denial-of-service conditions...
- News
A Record-Breaking Patch Tuesday for June 2026
Microsoft's June 2026 Patch Tuesday addressed nearly 200 security vulnerabilities — the highest single-month patch count in the company's history —...
- News
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Active exploitation of CVE-2026-4020 in the Gravity SMTP WordPress plugin has generated over 17 million malicious requests, allowing unauthenticated...
- News
Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure
CVE-2026-20253, a critical unauthenticated remote code execution flaw in Splunk Enterprise, is being actively exploited in the wild just days after public...
- Security
CVE-2026-54414: FileRise Path Traversal Enables Arbitrary File Write and Admin Takeover
A critical path traversal vulnerability in FileRise before 3.16.0 allows unauthenticated attackers to write arbitrary files and completely compromise...
- Security
CVE-2026-7515: BetterDocs Pro WordPress Plugin — Unauthenticated Local File Inclusion
A critical Local File Inclusion vulnerability in the BetterDocs Pro WordPress plugin (up to v3.8.0) allows unauthenticated attackers to include and...
- News
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 has released emergency security updates for two critical vulnerabilities in NGINX Open Source, including a CVSS 9.2 use-after-free flaw in the HTTP/3...
- News
Attackers Hit Pair of Critical Fortinet Vulnerabilities the Vendor Disclosed in April
Multiple threat intelligence firms have confirmed active exploitation of two critical vulnerabilities in Fortinet's FortiSandbox product — security flaws...
- News
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
CISA has added a maximum-severity vulnerability in the Joomla Content Editor (JCE) plugin to its Known Exploited Vulnerabilities catalog, warning that the...
- Security
CVE-2026-39574: Critical SQL Injection in InPost Gallery WordPress Plugin
A critical unauthenticated SQL injection vulnerability (CVSS 9.3) in the InPost Gallery WordPress plugin allows attackers to extract sensitive database...
- Security
CVE-2026-6933: Unauthenticated RCE in Premmerce Dev Tools WordPress Plugin
A high-severity unauthenticated remote code execution vulnerability (CVSS 8.8) in Premmerce Dev Tools for WordPress allows attackers to execute arbitrary...
- Security
CVE-2026-9862: Fortra BoKS OS Command Injection — CVSS 9.8 RCE
Critical OS command injection in Fortra Core Privileged Access Manager allows unauthenticated remote code execution via the boks_autoregisterd service at...
- News
Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw
Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an authentication bypass vulnerability in PAN-OS GlobalProtect portals carrying a...
- Security
CVE-2026-12204: ShopXO Scheduled Task Authorization Bypass
A CVSS 7.3 authorization bypass vulnerability in ShopXO up to 6.7.1 allows unauthenticated access to scheduled task endpoints in the Crontab controller,...
- Security
CVE-2026-8935: WP Maps Pro Unauthenticated Admin Account Creation (CVSS 9.8)
A critical unauthenticated vulnerability in the WP Maps Pro WordPress plugin before 6.1.1 allows any visitor to create an administrator account and...
- News
Google Confirms ShinyHunters Exploited Oracle PeopleSoft Zero-Day CVE-2026-35273
Google's Threat Intelligence Group confirmed in-the-wild exploitation of Oracle PeopleSoft zero-day CVE-2026-35273 by ShinyHunters, even as Oracle...
- Security
CVE-2026-54420: LiteSpeed cPanel Plugin Symlink Escape on Shared Hosting
A high-severity symlink vulnerability in the LiteSpeed cPanel plugin (CVSS 8.5) allows users with FTP or web shell access to escape CloudLinux/CageFS...
- Security
CVE-2026-5513: Bookly WordPress Plugin Stored XSS via Cookie
The Bookly scheduling plugin for WordPress contains a stored cross-site scripting vulnerability in versions up to 27.2, allowing unauthenticated attackers...
- News
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Splunk patches CVE-2026-20253, a CVSS 9.8 critical vulnerability enabling unauthenticated file operations and remote code execution in Splunk Enterprise.
- Security
CVE-2026-44990: sanitize-html XMP Element XSS Bypass (CVSS 9.3)
sanitize-html versions prior to 2.17.4 allow attacker-controlled content inside a disallowed xmp element to render as live HTML, enabling stored XSS.
- Security
CVE-2026-41005: Cloud Foundry UAA SAML Signature Bypass
A high-severity vulnerability (CVSS 9.0) in Cloud Foundry UAA allows attackers to bypass authentication by exploiting the incorrect treatment of XML...
- Security
CVE-2026-47365: WordPress Toolkit Argument Injection in cPanel & WHM
A critical CVSS 9.9 argument injection vulnerability in WordPress Toolkit before 6.11.0 allows remote authenticated users to bypass cross-tenant...
- Security
CVE-2026-47367: UID Enterprise Agent Command Injection via Improper Input Validation
A critical CVSS 9.9 command injection vulnerability in UID Enterprise Agent allows a low-privileged network attacker to execute arbitrary commands on the...
- Security
CVE-2026-47369: UniFi OS Privilege Escalation via Improper Input Validation
A critical CVSS 9.9 privilege escalation vulnerability in Ubiquiti UniFi OS allows a low-privileged network attacker to escalate privileges within UniFi...
- Security
CVE-2026-47370: UniFi OS Command Injection via Improper Input Validation
A critical CVSS 9.9 command injection vulnerability in Ubiquiti UniFi OS allows a low-privileged network attacker to execute arbitrary commands within...
- News
Microsoft Patches Exploited Exchange Server Vulnerability CVE-2026-42897
Microsoft has released a patch for CVE-2026-42897, an Exchange Server zero-day that has been under active exploitation since at least May 14, 2026. The...
- News
Oracle Mitigates PeopleSoft Zero-Day Exploited in Data Theft Attacks
Oracle has issued an emergency mitigation for CVE-2026-35273, a critical unauthenticated RCE flaw in PeopleSoft Suite being actively exploited by the...
- News
ShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach Universities
The ShinyHunters group, tracked by Mandiant as UNC6240, has been exploiting CVE-2026-35273 in Oracle PeopleSoft to breach universities and higher...
- Security
CVE-2025-6254: WordPress Doctreat Core Plugin Privilege Escalation (CVSS 9.8)
A critical unauthenticated privilege escalation vulnerability in the Doctreat Core WordPress plugin allows attackers to register with elevated roles,...
- News
Path Traversal Flaw in AI Dev Platform Langflow Exploited in Attacks
Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in Langflow, to write arbitrary files on exposed servers....
- News
Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE
A high-severity path traversal flaw (CVE-2026-5027, CVSS 8.8) in the AI application builder Langflow is being actively exploited with no patch available....
- Security
CVE-2026-47928: Adobe ColdFusion Critical RCE — CVSS 9.6
Adobe ColdFusion 2023.19 and 2025.8 are affected by a critical improper input validation flaw enabling unauthenticated remote code execution with scope change.
- News
Veeam Backup and Replication RCE Flaw Lets Domain Users Run Remote Code
A critical CVE-2026-44963 flaw in Veeam Backup and Replication lets low-privilege domain users achieve remote code execution on backup servers. CVSS 9.4 —...
- News
Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available
Cisco has disclosed active exploitation of CVE-2026-20245, a high-severity vulnerability in Catalyst SD-WAN Manager with a CVSS score of 7.8. No patch is…
- Security
CVE-2026-21029: Samsung Galaxy Editing Service Privilege Escalation
A high-severity vulnerability in Samsung's Galaxy Editing Service allows local attackers to execute privileged operations due to improper export of Android…
- Security
CVE-2026-7537: MDJM Event Management WordPress Plugin Arbitrary File Upload
A high-severity arbitrary file upload vulnerability in the MDJM Event Management plugin for WordPress allows authenticated attackers to upload malicious files…
- Security
CVE-2026-9851: WordPress Booking Package Plugin Privilege Escalation via Account Takeover
A high-severity privilege escalation vulnerability in the Booking Package WordPress plugin allows unauthenticated or low-privileged attackers to take over…
- News
Cisco Warns of Unpatched SD-WAN Zero-Day Exploited in Attacks
Cisco has issued an emergency warning about an actively exploited, unpatched zero-day in Cisco Catalyst SD-WAN Manager (CVE-2026-20245) that enables root…
- News
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
CISA has added a critical remote code execution vulnerability in the Mirasvit Cache Warmer Magento extension to its Known Exploited Vulnerabilities catalog…
- Security
CVE-2026-36576: Critical OS Command Injection in docker-wkhtmltopdf-aas
A CVSS 9.8 OS command injection vulnerability in openlabs docker-wkhtmltopdf-aas allows unauthenticated remote code execution via a crafted POST request to…
- Security
CVE-2026-36748: High-Severity Stored XSS in RockRMS via Social Media Profile Links
RockRMS versions up to v16.13 are vulnerable to a CVSS 9.0 stored cross-site scripting flaw that allows attackers to inject malicious scripts through social…
- Security
CVE-2026-41283: OpenStack Mistral Critical RCE Vulnerability (CVSS 9.9)
A critical unauthenticated remote code execution flaw in OpenStack Mistral through 22.0.0 allows attackers to execute arbitrary commands via exposed API…
- News
Critical Kirki Flaw Exploited to Hijack WordPress Admin Accounts
Hackers are actively exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the widely-used Kirki Customizer Framework plugin for…
- Security
CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability
A Linux kernel vulnerability in the cgroups v1 release_agent feature allows local attackers to escalate privileges and escape containers. Added to CISA KEV…
- News
Google Fixes One Actively Exploited Android Zero-Day, 124 Flaws in June 2026 Update
Google's June 2026 Android security update patches 124 vulnerabilities including one zero-day flaw that has been actively exploited in targeted attacks…
- News
Palo Alto GlobalProtect VPN Auth Bypass Flaw Now Exploited in Attacks
Palo Alto Networks warns that CVE-2026-0257, a CVSS 7.8 authentication bypass in PAN-OS GlobalProtect, is under active exploitation by hackers attempting...
- Security
CVE-2026-9558: Critical SSTI in Mautic Enables Authenticated RCE
A Server-Side Template Injection flaw in Mautic's Twig-based theme engine allows authenticated users with theme upload permissions to execute arbitrary...
- Security
CVE-2026-35676: phpMyFAQ Unauthenticated Password Reset Vulnerability
phpMyFAQ before 4.1.3 contains a CVSS 8.2 flaw allowing unauthenticated attackers to reset any account password without token validation, enabling full...
- News
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Rapid7 discloses a critical CVSS 9.4 RCE in Gogs, the popular self-hosted Git service, letting any authenticated user run arbitrary code on the server.
- Security
CVE-2025-12686: Synology BeeStation OS Critical Buffer Overflow RCE
Buffer overflow in Synology BeeStation OS AdminCenter lets unauthenticated attackers execute code remotely (CVSS 9.8) — patch to 1.3.2-65648 now.
- Security
CVE-2026-44444: Lumiverse AI Plugin Install Scripts Enable RCE (CVSS 9.1)
Critical Lumiverse <0.9.7 flaw lets malicious extensions execute arbitrary code via package.json lifecycle scripts run by the Spindle build pipeline.
- Security
CVE-2026-44451: Lumiverse AI Chat TSX Sandbox Escape (CVSS 9.3)
Critical sandbox escape in Lumiverse <0.9.7 lets attackers bypass JS global shadowing via crafted TSX component overrides, enabling code execution.
- Security
CVE-2026-48027: Nx Console Embedded Malicious Code — CISA KEV
CISA adds CVE-2026-48027 to KEV after a malicious Nx Console VS Code extension was found harvesting credentials from disk and memory via obfuscation.
- News
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across
Microsoft has released updates fixing CVE-2026-45659, a CVSS 8.8 remote code execution vulnerability in SharePoint Server that requires no specialized.
- Security
CVE-2018-25362: Twitter-Clone SQL Injection via follow.php
Twitter-Clone 1 contains a high-severity SQL injection vulnerability in follow.php that allows attackers to extract sensitive database information through.
- Security
CVE-2026-9525: SQL Injection in itsourcecode Electronic
A remotely exploitable SQL injection vulnerability in the admin panel of itsourcecode Electronic Judging System 1.0 allows attackers to manipulate database.
- News
Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
CISA has added CVE-2026-9082, a SQL injection vulnerability in Drupal Core, to its Known Exploited Vulnerabilities catalog following confirmed in-the-wild...
- News
Drupal: Critical SQL Injection Flaw Now Targeted in Attacks
Drupal is warning that hackers are actively attempting to exploit a 'highly critical' SQL injection vulnerability, CVE-2026-9082, announced earlier this...
- News
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run
A maximum-severity vulnerability in the LiteSpeed User-End cPanel Plugin, tracked as CVE-2026-48172 with a CVSS score of 10.0, is under active...
- Security
CVE-2025-34291: Langflow Origin Validation Error
CISA adds CVE-2025-34291 to the Known Exploited Vulnerabilities catalog — an overly permissive CORS configuration combined with a SameSite=None refresh...
- News
Drupal Patches Highly Critical Vulnerability Exposing
Drupal has released an urgent security update for CVE-2026-9082, a highly critical flaw that can be exploited without authentication to achieve...
- News
Microsoft Warns of New Defender Zero-Days Exploited in Attacks
Microsoft has issued emergency patches for two Windows Defender vulnerabilities that were actively exploited as zero-days before fixes were available....
- News
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL
A coordinated wave of critical security patches landed this week from Ivanti, Fortinet, SAP, VMware, and n8n. Topping the list is CVE-2026-8043 in Ivanti...
- News
Microsoft Exchange Zero-Day Under Attack, No Patch Available
A zero-day XSS vulnerability in Microsoft Exchange Server (CVE-2026-42897) is being actively exploited in the wild, allowing attackers to compromise...
- News
Cisco Catalyst SD-WAN Controller Auth Bypass Actively
Cisco has patched a maximum-severity authentication bypass flaw in its Catalyst SD-WAN Controller that has already been exploited in limited attacks....
- News
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker
A heap buffer overflow in NGINX's rewrite module is under active exploitation, days after disclosure. The CVSS 9.2 flaw impacts both NGINX Plus and Open...
- Security
CVE-2026-8719: WordPress AI Engine Plugin Privilege
A missing WordPress capability check in the AI Engine plugin's MCP OAuth bearer-token path allows any authenticated user to escalate privileges to...
- News
Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited
Cisco has patched CVE-2026-20182, a zero-day in Catalyst SD-WAN Manager that has been actively exploited in targeted attacks by sophisticated threat actor...
- News
Microsoft Rejects Critical Azure Vulnerability Report, No
A security researcher claims Microsoft silently patched an Azure Backup for AKS vulnerability after rejecting his disclosure report — issuing no CVE and...
- News
Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild
Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions actively being targeted...
- Security
CVE-2020-37228: iDS6 DSSPro Digital Signage CAPTCHA
A critical CVSS 9.8 vulnerability in iDS6 DSSPro Digital Signage System 6.2 allows attackers to retrieve valid CAPTCHA codes from the login endpoint and...
- Security
CVE-2020-37239: libbabl 0.1.62 Broken Double-Free Detection
A critical CVSS 9.8 memory safety flaw in libbabl 0.1.62 allows attackers to call babl_free() twice on the same pointer without triggering the library's...
- Security
CVE-2026-41258: OpenMRS Velocity Template Injection Enables
A critical unsandboxed Apache Velocity template injection vulnerability in OpenMRS Core allows authenticated attackers to execute arbitrary code on the...
- Security
CVE-2026-45402: Open WebUI File ID Authorization Bypass
A high-severity authorization bypass in Open WebUI prior to 0.9.5 allows authenticated users to attach arbitrary files to resources they do not own via...
- Security
CVE-2026-42457: vCluster Platform Stored XSS via templateRef Name Field
A stored cross-site scripting vulnerability in vCluster Platform allows attackers to inject and execute arbitrary JavaScript via the name field of a...
- News
18-Year-Old NGINX Rewrite Module Flaw Enables
Researchers have disclosed multiple critical vulnerabilities in NGINX Plus and NGINX Open Source, including a heap buffer overflow in...
- Security
CVE-2026-40621: ELECOM Wireless LAN Access Point
Critical authentication bypass vulnerability in ELECOM wireless LAN access point devices allows unauthenticated attackers to access protected URLs and...
- News
Microsoft May 2026 Patch Tuesday Fixes 120 Flaws, No
Microsoft's May 2026 Patch Tuesday delivers security updates for 120 vulnerabilities across Windows, Edge, Office, Azure, and more — with no zero-days...
- News
Microsoft Patches 138 Vulnerabilities Including DNS and Netlogon RCE Flaws
Microsoft's May 2026 Patch Tuesday addresses 138 security vulnerabilities across its product portfolio, including 30 rated Critical — with notable DNS...
- Security
CVE-2026-8053: MongoDB Time-Series Out-of-Bounds Write
An authenticated user with database write privileges can trigger an out-of-bounds memory write in the mongod process via a flaw in MongoDB Server's...
- Security
CVE-2026-28872: Apple iOS & iPadOS Remote Denial-of-Service
A CVSS 7.5 denial-of-service vulnerability in Apple iOS and iPadOS allows a remote attacker to exhaust device resources and crash the operating system...
- News
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS
The Apache Software Foundation has released urgent security updates for the Apache HTTP Server addressing a severe vulnerability in the HTTP/2 protocol...
- News
Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation
Ivanti has disclosed a high-severity improper input validation vulnerability in Endpoint Manager Mobile (EPMM) that is being actively exploited in the...
- News
Ollama Out-of-Bounds Read Flaw Allows Remote Process Memory
Researchers have disclosed a critical out-of-bounds read vulnerability in Ollama that enables remote unauthenticated attackers to leak the entire process...
- News
PAN-OS RCE Exploit Under Active Use Enabling Root Access
Palo Alto Networks has disclosed that CVE-2026-0300, a critical CVSS 9.3 buffer overflow in the PAN-OS User-ID Authentication service, is being actively...
- Security
CVE-2026-37431: Beauty Parlour Management System SQL
A critical unauthenticated SQL injection vulnerability in Beauty Parlour Management System v1.1 allows attackers to dump the entire backend database via a...
- Security
CVE-2026-41583: ZEBRA Zcash Node Consensus Rule Bypass
A missing sighash validation in ZEBRA, the Rust-based Zcash node, allowed invalid V5 transactions to pass consensus checks — patched in zebrad 4.3.1 and...
- Security
CVE-2026-41588: RELATE Courseware Timing Attack in Authentication (CVSS 9.0)
A timing attack vulnerability in RELATE's check_sign_in_key() function could allow attackers to infer valid sign-in keys through response time differences...
- Security
CVE-2026-42193: Plunk Email Platform SNS Webhook Forgery
A critical unauthenticated vulnerability in Plunk, the open-source AWS SES email platform, allows attackers to forge Amazon SNS webhook payloads without...
- Security
CVE-2026-42296: Argo Workflows templateReferencing Strict
A high-severity security bypass in Argo Workflows (CVSS 8.1) allows users with Workflow creation permissions to escape templateReferencing: Strict mode,...
- Security
CVE-2026-33109: Azure Managed Instance for Apache Cassandra
A critical improper access control flaw in Azure Managed Instance for Apache Cassandra allows an authorized network attacker to execute arbitrary code,...
- Security
CVE-2026-41500: electerm macOS Command Injection via Install Script
A critical command injection vulnerability in the electerm terminal client allows remote attackers to achieve unauthenticated code execution on macOS...
- Security
CVE-2026-41501: electerm Linux Command Injection via Install Script
A critical command injection flaw in electerm's Linux installer allows remote attackers to execute arbitrary shell commands by injecting into unsanitized...
- Security
CVE-2026-42208: LiteLLM AI Gateway Pre-Auth SQL Injection
A critical SQL injection vulnerability in LiteLLM's proxy server allows unauthenticated attackers to manipulate database queries during API key...
- News
CISA Adds Actively Exploited Linux Root Access Bug
The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2026-31431, a Linux kernel privilege escalation flaw enabling root access, to its...
- Security
CVE-2026-5324: WordPress Brizy Page Builder Unauthenticated
The Brizy Page Builder plugin for WordPress contains a critical unauthenticated Stored Cross-Site Scripting flaw in versions up to 2.8.11, enabling...
- News
Critical cPanel Flaw Mass-Exploited in 'Sorry' Ransomware
A newly disclosed critical vulnerability in cPanel and WHM tracked as CVE-2026-41940 is being mass-exploited by ransomware actors to breach web hosting...
- Security
CVE-2026-42779: Critical Apache MINA Deserialization Class
An incomplete fix for CVE-2026-41635 leaves Apache MINA 2.1.x and 2.2.x branches exposed to a critical deserialization bypass via...
- News
Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now
The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been...
- News
CISA Adds Actively Exploited ConnectWise and Windows Flaws
CISA has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog — CVE-2024-1708 affecting ConnectWise ScreenConnect...
- News
GitHub Fixes RCE Flaw That Gave Access to Millions of Private Repos
GitHub has patched CVE-2026-3854, a critical remote code execution vulnerability exploitable via a single HTTP request that could have granted attackers...
- Security
CVE-2026-35155: Dell iDRAC10 Race Condition Enables
Dell iDRAC10 versions 1.20.70.50 and 1.30.05.10 contain a race condition vulnerability allowing authenticated low-privileged attackers to gain elevated...
- News
Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
Cybersecurity researchers have disclosed CVE-2026-25874, a critical unauthenticated remote code execution vulnerability (CVSS 9.3) in Hugging Face's...
- News
Hackers Are Exploiting a Critical LiteLLM Pre-Auth SQLi Flaw
Threat actors are actively exploiting CVE-2026-42208, a critical pre-authentication SQL injection vulnerability in the LiteLLM open-source LLM gateway,...
- News
Firefox Vulnerability Allows Tor User Fingerprinting Across
A high-severity Firefox vulnerability (CVE-2026-6770) exploits the internal ordering of IndexedDB database names to generate a stable 44-bit fingerprint...
- Security
CVE-2026-6785: Memory Safety Bugs in Firefox and Thunderbird Enable Arbitrary Code Execution
A CVSS 8.1 high-severity collection of memory safety bugs affects Firefox 149, Firefox ESR 140.9, Firefox ESR 115.34, Thunderbird 149, and Thunderbird ESR...
- Security
CVE-2026-7037: Unauthenticated OS Command Injection in Totolink A8000RU
A critical CVSS 9.8 OS command injection vulnerability in the Totolink A8000RU router allows unauthenticated remote attackers to execute arbitrary...
- Security
CVE-2025-29635: D-Link DIR-823X Command Injection
A command injection flaw in end-of-life D-Link DIR-823X routers allows authenticated remote attackers to execute arbitrary OS commands. CISA has added...
- Security
CVE-2026-21515: Azure IoT Central Elevation of Privilege
A critical CVSS 9.9 elevation of privilege vulnerability in Azure IoT Central allows an authenticated attacker to escalate privileges over a network by...
- Security
CVE-2026-39440: FunnelFormsPro WordPress Plugin Remote Code
A critical code injection vulnerability in the FunnelFormsPro WordPress plugin through version 3.8.1 allows remote code inclusion, enabling attackers to...
- Security
CVE-2026-6885: Borg SPM 2007 Arbitrary File Upload Enables
A critical arbitrary file upload vulnerability in the end-of-life Borg SPM 2007 application allows unauthenticated attackers to upload web shell backdoors...
- Security
CVE-2026-6886: Borg SPM 2007 Authentication Bypass Allows
A critical authentication bypass vulnerability in the end-of-life Borg SPM 2007 application permits unauthenticated remote attackers to log into the...
- Security
CVE-2026-6887: Borg SPM 2007 SQL Injection Exposes Full
A critical SQL injection vulnerability in the end-of-life Borg SPM 2007 application allows unauthenticated remote attackers to inject arbitrary SQL...
- Security
CVE-2026-33656: EspoCRM Formula Engine Attachment sourceId
A critical improper access control vulnerability in EspoCRM's built-in formula scripting engine allows authenticated administrators to overwrite the...
- Security
CVE-2026-39987: Marimo Pre-Auth Remote Code Execution
A critical pre-authorization remote code execution vulnerability in Marimo, the open-source reactive Python notebook, allows unauthenticated attackers to...
- Security
CVE-2026-41167: Jellystat Authenticated SQL Injection in Multiple API Endpoints (CVSS 9.1)
A critical SQL injection vulnerability in Jellystat, the open-source statistics app for Jellyfin, allows authenticated users to execute arbitrary SQL...
- Security
CVE-2026-4119: WordPress Create DB Tables Plugin
A critical CVSS 9.1 authorization bypass in the WordPress Create DB Tables plugin (all versions up to 1.2.1) allows unauthenticated users to create or...
- News
New Mirai Campaign Exploits RCE Flaw in End-of-Life D-Link
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability in end-of-life D-Link DIR-823X...
- Security
CVE-2026-21997: Oracle Life Sciences Empirica Signal
A high-severity vulnerability in Oracle Life Sciences Empirica Signal versions 9.2.1-9.2.3 allows a low-privileged attacker with network access via HTTP...
- Security
CVE-2026-22753: Spring Security Filter Chain Bypass via PathPattern Matcher
A high-severity flaw in Spring Security allows security filter chains to silently fail to match requests when PathPatternRequestMatcher.Builder is used to...
- News
Surge in Bomgar RMM Exploitation Demonstrates Supply Chain
A critical RCE flaw in BeyondTrust Bomgar remote monitoring and management software is being actively exploited to spread ransomware and compromise...
- Security
CVE-2025-2749: Kentico Xperience Path Traversal
Kentico Xperience contains a path traversal vulnerability allowing an authenticated user's Staging Sync Server to upload arbitrary data to relative path...
- Security
CVE-2026-24467: OpenAEV Password Reset Account Takeover
OpenAEV's password reset implementation contains multiple chained weaknesses enabling reliable account takeover in versions 1.0.0 through 2.0.12 of the...
- Security
CVE-2026-29646: OpenXiangShan NEMU RISC-V Hypervisor
A critical privilege escalation flaw in OpenXiangShan NEMU's RISC-V hypervisor extension allows a VS-mode guest write to the supervisor interrupt-enable...
- Security
CVE-2026-32604: Spinnaker Clouddriver Remote Code Execution
A critical unauthenticated RCE vulnerability in Spinnaker's clouddriver service allows attackers to execute arbitrary commands on clouddriver pods,...
- Security
CVE-2026-32613: Spinnaker Echo Spring Expression Language
A critical code injection flaw in Spinnaker's Echo service allows unrestricted Spring Expression Language (SPeL) execution via artifact processing,...
- Security
CVE-2026-39918: Vvveb CMS Unauthenticated PHP Code
Vvveb CMS versions prior to 1.0.8.1 allow unauthenticated attackers to inject arbitrary PHP code through the installation endpoint's unsanitized subdir...
- News
SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious
A critical CVSS 9.8 command injection vulnerability in the SGLang AI inference framework allows attackers to achieve remote code execution by supplying a...
- News
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables
A critical authentication bypass vulnerability in nginx-ui, a popular open-source web-based Nginx management interface, is being actively exploited to...
- News
NIST to Stop Rating Non-Priority Flaws Due to Volume
The National Institute of Standards and Technology will stop assigning CVSS severity scores to lower-priority vulnerabilities in the NVD as CVE submission...
- News
In Other News: Satellite Cybersecurity Act, $90K Chrome
This week's cybersecurity roundup covers the proposed Satellite Cybersecurity Act, a $90,000 Chrome heap overflow bug, a 16-year-old hacker arrest,...
- Security
CVE-2026-37749: SQL Injection Auth Bypass in CodeAstro
A critical SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows unauthenticated remote attackers to bypass login...
- Security
CVE-2026-40492: SAIL XWD Codec Heap Buffer Overflow (CVSS
A critical heap buffer overflow in the SAIL image library's XWD codec arises from a mismatch between pixel depth and bits-per-pixel, enabling arbitrary...
- Security
CVE-2026-40493: SAIL PSD Codec Buffer Overflow via channels
A critical out-of-bounds write in SAIL's PSD codec occurs when the pixel buffer is allocated using a raw header formula that doesn't account for actual...
- Security
CVE-2026-40494: SAIL TGA Codec RLE Decoder Asymmetric
A critical heap write-past-end vulnerability in SAIL's TGA codec RLE decoder stems from an asymmetric bounds check that correctly validates run-packets...
- Security
CVE-2026-6284: PLC Brute Force Password Bypass (CVSS 9.1)
A critical vulnerability in a programmable logic controller allows unauthenticated network attackers to brute force weak passwords and gain full...
- Security
CVE-2026-6518: WordPress CMP Plugin Arbitrary File Upload
The CMP Coming Soon & Maintenance Plugin for WordPress contains a critical arbitrary file upload flaw that allows subscriber-level authenticated users to...
- Security
CVE-2026-40322: SiYuan XSS via Mermaid innerHTML Injection
SiYuan knowledge management versions 3.6.3 and below render Mermaid diagrams with loose security, allowing attacker-controlled javascript: URLs to execute...
- Security
CVE-2026-6112: Totolink A7100RU OS Command Injection via setRadvdCfg
A critical OS command injection vulnerability (CVSS 9.8) in Totolink A7100RU firmware allows unauthenticated remote attackers to execute arbitrary...
- Security
CVE-2026-6113: Totolink A7100RU OS Command Injection via setTtyServiceCfg
A critical OS command injection flaw (CVSS 9.8) in Totolink A7100RU enables remote unauthenticated attackers to execute arbitrary commands by manipulating...
- Security
CVE-2026-6114: Totolink A7100RU OS Command Injection via setNetworkCfg
CVE-2026-6114 is a critical OS command injection vulnerability (CVSS 9.8) in the Totolink A7100RU router's setNetworkCfg function, exploitable remotely...
- Security
CVE-2026-6115: Totolink A7100RU OS Command Injection via setAppCfg
CVE-2026-6115 describes a critical OS command injection vulnerability (CVSS 9.8) in the Totolink A7100RU router, exploitable remotely and without...
- Security
CVE-2025-57735: Apache Airflow JWT Token Not Invalidated on Logout
A critical CVSS 9.1 vulnerability in Apache Airflow fails to invalidate JWT tokens upon user logout, allowing intercepted tokens to be reused for...
- Security
CVE-2026-34177: Canonical LXD Incomplete VM Restriction
A critical CVSS 9.1 flaw in Canonical LXD versions 4.12 through 6.7 omits raw.apparmor and raw.qemu.conf from the VM low-level option denylist, allowing...
- Security
CVE-2026-34178: Canonical LXD Backup Import Path
A critical CVSS 9.1 vulnerability in Canonical LXD before 6.8 allows authenticated attackers to bypass project restrictions during backup import. The...
- Security
CVE-2026-34578: OPNsense LDAP Injection Enables Auth Bypass
A high-severity LDAP injection vulnerability in OPNsense's authentication connector allows unauthenticated attackers to bypass login controls by injecting...
- Security
CVE-2026-5977: TOTOLINK A7100RU Critical OS Command
A critical OS command injection vulnerability (CVSS 9.8) in TOTOLINK A7100RU routers allows unauthenticated remote attackers to execute arbitrary system...
- Security
CVE-2026-5978: TOTOLINK A7100RU Critical OS Command
A second critical OS command injection vulnerability (CVSS 9.8) in TOTOLINK A7100RU routers allows unauthenticated remote attackers to execute arbitrary...
- Security
CVE-2026-4498: Kibana Fleet Plugin Privilege Escalation
A high-severity privilege escalation flaw in Kibana's Fleet plugin debug route handlers allows authenticated users with limited Fleet sub-feature...
- Security
CVE-2026-35392: Critical Path Traversal in goshs Go HTTP
A critical CVSS 9.8 path traversal vulnerability in goshs, a SimpleHTTPServer written in Go, allows unauthenticated attackers to write arbitrary files via...
- Security
CVE-2026-5637: SQL Injection in projectworlds Car Rental
A remotely exploitable SQL injection vulnerability (CVE-2026-5637) has been disclosed in projectworlds Car Rental System 1.0. The flaw exists in...
- News
Fortinet FortiClient EMS Zero-Day CVE-2026-35616 Actively
A critical zero-day in FortiClient EMS with a CVSS score of 9.8 is being actively exploited in the wild while Fortinet has released only an emergency...
- Security
CVE-2026-26477: DokuWiki media_upload_xhr() Denial of Service
A high-severity denial-of-service vulnerability in DokuWiki v.2025-05-14b 'Librarian' allows remote attackers to crash the application by exploiting the...
- Security
CVE-2026-3445: ProfilePress WordPress Plugin Allows
A high-severity authorization flaw in the ProfilePress WordPress plugin (up to v4.16.11) lets unauthenticated or low-privilege users bypass membership...
- Security
CVE-2026-4896: WCFM WooCommerce Plugin IDOR Allows
A high-severity Insecure Direct Object Reference vulnerability in the WCFM Frontend Manager for WooCommerce plugin (up to v6.7.25) lets authenticated...
- Security
CVE-2026-28815: swift-crypto X-Wing HPKE Out-of-Bounds Read
A crafted short X-Wing HPKE encapsulated key can trigger an out-of-bounds read in the C decapsulation path of Apple's swift-crypto library, potentially...
- News
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts
A large-scale credential harvesting campaign has been observed exploiting the React2Shell vulnerability (CVE-2025-55182) as an initial infection vector,...
- News
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation
Google has released a Chrome security update patching 21 vulnerabilities including a high-severity use-after-free zero-day in the Dawn graphics engine...
- Security
CVE-2026-1579: MAVLink Protocol Unauthenticated Shell Access
A critical CVSS 9.8 vulnerability in the MAVLink drone communication protocol allows unauthenticated attackers to send arbitrary SERIAL_CONTROL commands —...
- Security
CVE-2026-5272: Chrome GPU Heap Buffer Overflow Enables
A high-severity heap buffer overflow in Chrome's GPU component allows remote attackers to execute arbitrary code via a crafted HTML page. Affects all...
- News
Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks
F5 has reclassified a BIG-IP APM vulnerability from denial-of-service to critical remote code execution, warning that attackers are actively exploiting...
- Security
CVE-2026-32973: OpenClaw Exec Allowlist Bypass via Glob
A critical CVSS 9.8 vulnerability in OpenClaw allows attackers to bypass the exec allowlist by exploiting improper glob pattern normalization where the ?...
- Security
CVE-2026-32975: OpenClaw Zalouser Weak Authorization via Mutable Group Display Names
A critical CVSS 9.8 authorization bypass in OpenClaw's Zalouser allowlist mode matches mutable group display names instead of stable identifiers, letting...
- Security
CVE-2026-32987: OpenClaw Bootstrap Code Replay Enables
A critical CVSS 9.8 vulnerability in OpenClaw allows attackers to replay a valid bootstrap setup code multiple times before approval, escalating device...
- Security
CVE-2026-4176: Perl Compress::Raw::Zlib Critical
Perl versions 5.9.4 through 5.43.8 ship a vulnerable Compress::Raw::Zlib core module that inherits CVE-2026-3381 from a vendored zlib dependency. CVSS 9.8...
- Security
CVE-2026-5128: Steam Trader 2.1.1 Unauthenticated Sensitive
A CVSS 10.0 critical vulnerability in steam-trader 2.1.1 exposes Steam account credentials, identity secrets, and shared secrets to unauthenticated remote...
- Security
CVE-2026-5016: elecV2P SSRF Vulnerability in URL Handler
A server-side request forgery vulnerability in elecV2P up to version 3.8.3 allows remote attackers to manipulate the eAxios function via the /mock...
- Security
CVE-2026-33875: Gematik Authenticator Authentication Flow
A critical vulnerability in Gematik Authenticator prior to version 4.16.0 allows attackers to hijack authentication sessions via malicious deep links,...
- Security
CVE-2025-53521: F5 BIG-IP APM Remote Code Execution — CISA
A critical unauthenticated RCE vulnerability in F5 BIG-IP APM is being actively exploited in the wild. Malicious traffic targeting access policy virtual...
- Security
CVE-2026-33669: SiYuan Unauthenticated Document Content
A critical unauthenticated information disclosure vulnerability in SiYuan, the personal knowledge management system, allows remote attackers to retrieve...
- Security
CVE-2026-33670: SiYuan readDir Path Traversal Notebook
A critical path traversal vulnerability in SiYuan's /api/file/readDir interface allows unauthenticated remote attackers to traverse notebook directories...
- Security
CVE-2026-33478: AVideo CloneSite Plugin Unauthenticated RCE
A critical chain of vulnerabilities in WWBN AVideo's CloneSite plugin allows fully unauthenticated attackers to achieve remote code execution via key...
- News
Interlock Ransomware Exploited Cisco FMC Zero-Day for 36
CVE-2026-20131, a maximum-severity CVSS 10.0 insecure deserialization flaw in Cisco Firepower Management Center, was exploited by Interlock ransomware as...
- News
Critical Langflow RCE Flaw Exploited Within 20 Hours of Disclosure
CVE-2026-33017, a CVSS 9.3 unauthenticated remote code execution vulnerability in the Langflow AI platform, was weaponized by threat actors within 20...
- Security
CVE-2025-43510: Apple Multiple Products Improper Locking
Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability allowing a malicious app to cause unexpected changes in...
- Security
CVE-2026-22172: OpenClaw Critical Authorization Bypass via WebSocket Scope Elevation
A critical CVSS 9.9 authorization bypass in OpenClaw allows authenticated users to self-declare elevated scopes over WebSocket connections without...
- News
Oracle Pushes Emergency Fix for Critical Identity Manager
Oracle has released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability in Oracle Identity Manager and...
- News
Critical Unpatched GNU Telnetd Flaw (CVE-2026-32746)
Researchers have disclosed a critical unauthenticated remote code execution vulnerability in the GNU InetUtils telnet daemon (telnetd). CVE-2026-32746...
- News
Interlock Ransomware Has Been Exploiting Cisco FMC Zero-Day
The Interlock ransomware gang has been actively exploiting a CVSS 10.0 insecure deserialization flaw in Cisco Secure Firewall Management Center since late...
- Security
CVE-2026-21994: Critical Unauthenticated RCE in Oracle Edge
A critical unauthenticated remote code execution vulnerability (CVSS 9.8) in Oracle's Edge Cloud Infrastructure Designer and Visualisation Toolkit allows...
- Security
CVE-2026-30884: Critical Authorization Bypass in Moodle
A critical (CVSS 9.6) authorization bypass vulnerability in the moodle-mod_customcert plugin allows any teacher with manage capability in a single course...
- Security
CVE-2026-32298: Angeet ES3 KVM OS Command Injection via cfg.lua Script
A high-severity OS command injection vulnerability (CVSS 9.1) in the Angeet ES3 KVM switch allows authenticated attackers to execute arbitrary OS-level...
- Security
CVE-2025-69902: Critical Command Injection in kubectl-mcp-server
A critical command injection vulnerability in kubectl-mcp-server allows unauthenticated attackers to execute arbitrary OS commands through unsanitized...
- Security
CVE-2026-4177: YAML::Syck Heap Buffer Overflow Enables
A critical heap buffer overflow in YAML::Syck for Perl allows remote code execution through crafted YAML input that exceeds the 512-byte class name...
- Security
CVE-2026-4312: DrangSoft GCB/FCB Audit Software Missing
A critical missing authentication flaw (CVSS 9.8) in DrangSoft's GCB/FCB Audit Software allows unauthenticated remote attackers to directly access...
- Security
CVE-2015-20115: RealtyScript 4.0.2 Stored XSS via File
CVE-2015-20115 is a stored cross-site scripting vulnerability in RealtyScript 4.0.2 that allows authenticated attackers to upload malicious script files...
- Security
CVE-2025-47813: Wing FTP Server Path Disclosure Enables RCE
CISA has added CVE-2025-47813, a medium-severity information disclosure flaw in Wing FTP Server, to its KEV catalog after confirming active exploitation...
- News
Veeam Patches Five Critical RCE Vulnerabilities Exposing
Veeam Software has released a critical security update for Backup & Replication, patching five remote code execution vulnerabilities with CVSS scores...
- News
CISA Flags Actively Exploited n8n RCE Bug as 24,700
CISA added CVE-2025-68613 — a CVSS 9.9 remote code execution flaw in n8n's workflow expression evaluator — to its Known Exploited Vulnerabilities catalog...
- News
Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft
Security researchers have published details of two newly patched critical vulnerabilities in n8n — CVE-2026-27577 (CVSS 9.4), an expression sandbox escape...
- Security
CVE-2025-68613: n8n Remote Code Execution via Improper
CISA adds CVE-2025-68613 to the Known Exploited Vulnerabilities catalog — a CVSS 9.9 flaw in n8n's workflow expression evaluation system that enables...
- Checklist
Vulnerability Management Checklist
Structured checklist for building and maintaining a vulnerability management program — scan cadence, patching SLAs, risk acceptance workflows, remediation...
- Security
CVE-2026-29067: ZITADEL Password Reset Poisoned by Host Header Injection
A high-severity host header injection vulnerability in ZITADEL's login V2 password reset flow allows attackers to redirect reset links to...
- Security
ZITADEL Critical XSS in SAML Endpoint Enables 1-Click
A critical cross-site scripting vulnerability in ZITADEL's login V2 /saml-post endpoint allows unauthenticated attackers to execute arbitrary JavaScript...
- Security
CVE-2026-29192: ZITADEL Stored XSS via Default Redirect URI
A stored cross-site scripting vulnerability in ZITADEL's login V2 interface allows organization administrators to inject malicious JavaScript via a...
- Security
CVE-2026-28775: Unauthenticated Root RCE in IDC SFX
A critical unauthenticated RCE vulnerability in International Datacasting Corporation's SFX Series satellite receivers allows attackers to execute...
- Security
CISA Adds Two Actively Exploited Roundcube Webmail Flaws to KEV
CISA has added two Roundcube Webmail vulnerabilities to the Known Exploited Vulnerabilities catalog — CVE-2025-49113 (CVSS 9.9, deserialization RCE) and...
- Security
Microsoft February 2026 Patch Tuesday Fixes Six Actively
Microsoft's February 2026 Patch Tuesday addresses roughly 60 vulnerabilities including six actively exploited zero-days across Windows, Office, and Azure...
- News
2026 Vulnerability Forecast: Up to 117,000 CVEs Expected
FIRST predicts a median of 59,427 new CVEs in 2026 with realistic scenarios reaching 70,000-100,000 vulnerabilities, as software complexity and...
- Security
Microsoft Patch Tuesday February 2026: 6 Actively Exploited
Microsoft's February 2026 Patch Tuesday addresses 60 vulnerabilities including 6 actively exploited zero-days and 3 publicly disclosed issues, with...
- Security
WinRAR Path Traversal Flaw CVE-2025-8088 Actively Exploited
Critical path traversal vulnerability in WinRAR enables ransomware and credential theft as Russian and Chinese threat actors weaponize phishing campaigns...
- Security
NGINX TLS Vulnerability Enables Man-in-the-Middle Attacks
CVE-2026-1642 affects NGINX OSS and Plus when proxying to upstream TLS servers, allowing attackers to inject plaintext data into responses.
- Security
Critical Vulnerability Discovered in Popular Enterprise VPN
Security researchers have identified a severe authentication bypass vulnerability affecting multiple enterprise VPN products. Immediate patching recommended.
- Security
WordPress Plugin Vulnerability (CVSS 10.0) Under Active
Maximum severity flaw in Modular DS WordPress plugin allows unauthenticated privilege escalation. All versions through 2.5.1 affected with active...
- News
Google Patches Actively Exploited Chrome Zero-Day
Google has released an emergency Chrome update to fix a zero-day vulnerability being actively exploited in targeted attacks against journalists and activists.
- News
Mass Exploitation of Fortinet FortiGate Devices Underway
Security researchers warn of mass exploitation campaigns targeting Fortinet FortiGate firewalls. Over 50,000 devices believed to be compromised globally.
- Security
Critical D-Link Router RCE Under Active Exploitation - No
CVE-2026-0625 allows unauthenticated remote code execution on legacy D-Link DSL routers. Devices are end-of-life with no patches forthcoming. Immediate...
- Security
Microsoft January 2026 Patch Tuesday: 114 Flaws Fixed, One
Microsoft's first security update of 2026 addresses 114 vulnerabilities including three zero-days. One flaw is actively exploited in the wild with CISA...