#Vulnerability
All CosmicBytez Labs articles tagged #Vulnerability, across news, security advisories, how-to guides, and projects.
- News
Adobe Patches 176 Vulnerabilities Across 11 Products
Adobe's October 2026 update fixes 176 flaws across AEM, ColdFusion, Photoshop, and more, aided by AI-assisted vulnerability hunting.
- News
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
CVE-2026-85097 (CVSS 10.0), a critical flaw in the Bricksforge WordPress plugin, is under active exploitation enabling unauthenticated RCE.
- News
GitLab Warns of Max-Severity Code Execution Vulnerability in CI/CD Regex Compiler
GitLab patched CVE-2026-97229, a CVSS 10.0 flaw letting unauthenticated attackers run code via a crafted CI/CD regex; patch to 19.4.2, 19.3.4, or 19.2.8.
- Security
CVE-2026-108799: SQL Injection in XCMS Password Recovery Endpoint
High-severity SQLi (CVSS 7.3) in jackq XCMS's password recovery mail endpoint lets remote, unauthenticated attackers inject SQL via the email field.
- News
Citrix Warns of New Critical NetScaler RCE Flaw in SAML Deployments
A new critical NetScaler ADC and Gateway memory-overflow flaw in SAML configurations enables RCE; Citrix urges admins to patch immediately.
- News
Hackers Exploit Critical Atlassian Flaw After Public PoC Release
Active exploitation of Atlassian's CVE-2026-21589 began within 2 hours of a public PoC, hitting Jira, Confluence, and Bitbucket Data Center.
- Security
CVE-2026-97720: Apache Impala JWT/OAuth Authentication Bypass
Apache Impala executor webservers accept any valid JWT without checking its signature, letting attackers bypass JWT/OAuth auth entirely.
- News
Atlassian Patches Critical Arbitrary File Access Flaw Affecting 8 Products
CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read specific files on Bitbucket, Confluence, Jira, and five other Atlassian Data Center products.
- News
Atlassian Warns of Critical File-Access Flaw in Jira, Confluence
CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read files in Jira, Confluence, Bitbucket and five more Data Center products.
- News
Rejetto HFS Servers Now Actively Scanned for Critical RCE Flaw
Attackers are actively scanning for CVE-2026-61500, a weak signing-key flaw in Rejetto HFS enabling session forgery and remote code execution.
- News
Citrix's Third NetScaler Zero-Day in Five Weeks Hits Appliances Patched Days Earlier
CVE-2026-88779 struck NetScaler appliances patched days earlier for two other zero-days; CISA's KEV listing set an October 7 deadline.
- Security
CVE-2026-105182: Unauthenticated SQL Injection in SourceCodester Online Reviewer Management System via Title Parameter
SourceCodester Online Reviewer Management System 1.0 lets remote, unauthenticated attackers inject SQL via the Title parameter in btn_functions.php.
- News
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Delivery Path
Researchers released a PoC for CVE-2026-86950, a CoreGraphics bug Apple patched after targeted attacks; WhatsApp's new PDF scans hint at the delivery path.
- News
Citrix Patches NetScaler SAML Zero-Day Exploited in Attacks
Citrix rushed emergency patches for CVE-2026-88779, a NetScaler SAML zero-day exploited in DoS attacks as researchers probe RCE potential.
- News
Microsoft Says Threat Actors Are Ahead in the Early AI Race
Microsoft's 2026 Digital Defense Report warns attackers are weaponizing AI faster than defenders, cutting exploit timelines to under 24 hours.
- News
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
CISA added FortiMail flaw CVE-2026-104286 (CVSS 9.8) to its KEV catalog after active exploitation; no patch yet, only workarounds.
- News
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action
CVE-2026-104286, a critical FortiMail path traversal flaw (CVSS 9.8), is under active exploitation. No patch yet — Fortinet urges workarounds now.
- Security
CVE-2026-97644: Groundhogg Privilege Escalation via Contact Identity Rebinding
CVE-2026-97644 (CVSS 8.8): Groundhogg ≤ 4.9 lets Sales Person+ users rebind contact records to an Admin's user ID, enabling full account takeover.
- News
Frontline Education Breach Exposes School District Employee Data
Frontline Education is notifying districts that a third-party software flaw let attackers steal employee SSNs, emails, and addresses.
- Security
CVE-2026-92244: Unauthenticated Stored XSS in WooCommerce PDF Invoices Plugin
High-severity stored XSS (CVSS 7.2) in PDF Invoices & Packing Slips for WooCommerce, 300K+ sites, triggered via guest checkout fields.
- Security
CVE-2026-62071: Unauthenticated SQL Injection in WordPress File Upload Plugin
Critical unauthenticated SQLi (CVSS 9.3) in WordPress File Upload ≤ 5.1.10 lets attackers read or alter site databases. Patched in 5.2.0.
- Security
CVE-2026-79898: Authenticated Command Injection to Root in Fortra BoKS Manager
An authenticated user who can add CRL URLs in Fortra BoKS Manager can trigger shell command injection, executing as root on the BoKS Master.
- News
Kiteworks Lifts Shutdown Advisory After 'Credible Threat Intelligence' From Federal Authorities
Kiteworks found and patched a critical Advanced Forms flaw during a weekend-long precautionary shutdown; no evidence it was ever exploited.
- Security
CVE-2026-103110: Pexip Infinity Conferencing Node Critical RCE
A CVSS 9.8 unauthenticated RCE flaw in Pexip Infinity lets remote attackers execute code on Conferencing Nodes pre-38.2, 39.0, 39.1, and 40.0.
- Security
CVE-2026-102909: SQL Injection in SourceCodester Online Reviewer Management System via access_code
CVE-2026-102909: SourceCodester Online Reviewer Management System 1.0 allows remote SQL injection via the access_code parameter in btn_functions.php.
- News
Kiteworks Patches Critical Flaw, Brings Customer Systems Online
Kiteworks restored customer systems after a nine-hour precautionary shutdown tied to threat intel, finding and patching a critical Advanced Forms flaw.
- Security
CVE-2026-101065: Obot AI Agent Platform Ships With Authentication Disabled by Default
Obot's documented Docker quickstart boots with auth off and the Docker socket mounted in, letting any network caller reach the host. CVSS 9.8.
- Security
CVE-2026-101084: Obot Authorization Bypass Lets Any User Reach Restricted MCP Servers
Obot's /mcp-connect gateway skipped access-control checks before v0.21.1, letting any authenticated user invoke restricted MCP tools. CVSS 9.6.
- Security
CVE-2026-101090: Nezha Regression Lets Attackers Hijack OAuth2 Logins via Host Header
A patched Nezha flaw returns when dashboard_host is empty — attacker Host headers get reflected into OAuth2 redirect_uri, enabling login hijacking.
- Security
CVE-2026-88773: Citrix NetScaler HTTP Request Smuggling Flaw
Citrix patches a CVSS 9.3 HTTP request smuggling flaw in NetScaler ADC/Gateway that can enable cache poisoning and auth bypass at the proxy layer.
- Security
CVE-2026-88775: Citrix NetScaler Memory Overflow Vulnerability
A critical memory overflow flaw in Citrix NetScaler ADC/Gateway (CVSS 9.8) risks crashes or worse on Gateway and AAA virtual servers — patch now.
- News
Cloudflare Fixes Containers Cross-Tenant Flaw Exposing Customer Data
A shared-disk flaw in Cloudflare Containers let Workers Paid customers recover residual data from other tenants before a fleet-wide fix on Sept. 19.
- Security
CVE-2026-39353: InvoicePlane Template Whitelist Flaw Enables RCE
A critical InvoicePlane flaw lets a trusted PHP template become unauthenticated RCE via the public invoice view. CVSS 9.1, fixed in 1.7.2-rc-1.
- Security
CVE-2026-42322: Piwigo Logo Upload Flaw Enables Authenticated RCE
Piwigo ≤ 16.4.0 lets an authenticated admin bypass extension checks in the logo uploader to plant a PHP webshell. CVSS 9.1 — patch to 16.4.0.
- Security
CVE-2026-42323: Unvalidated Batch Manager Filters Enable SQL Injection in Piwigo
High-severity SQL injection (CVSS 7.2) in Piwigo Batch Manager lets authenticated admins inject via unvalidated dimension/filesize filter values.
- Security
CVE-2026-42324: Piwigo Second-Order SQL Injection via image_order[]
A high-severity second-order SQL injection (CVSS 7.2) in Piwigo lets an admin-stored sort value reach ORDER BY clauses unsanitized. Fixed in 16.4.0.
- News
Elementor WordPress Flaw Lets Attackers Create Admin Accounts
A CSRF flaw in Elementor 4.3.0 and 4.3.1 (CVE-2026-62062) bypassed REST nonce checks, letting attackers create rogue WordPress admin accounts.
- News
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
The Canadian Centre for Cyber Security warns CVE-2026-48842, a pre-auth SQL injection flaw in Roundcube webmail, is being exploited in the wild.
- News
ShinyHunters Hacked Clop's Leak Site Using a Grav CMS Path Traversal Flaw
ShinyHunters defaced Clop's Tor leak site via an unauthenticated Grav CMS flaw, claims stolen data and onion keys, and is extorting the gang for eight figures.
- Security
CVE-2026-14281: Unauthenticated Admin Takeover in WAWP WooCommerce Plugin
Missing REST permission checks in the WAWP plugin (≤4.8.6) let anyone register as a WordPress administrator via signup. CVSS 9.8, PoC public.
- Security
CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
An unauthenticated SSH workflow-bypass in MikroTik RouterOS chains with CVE-2026-86060 for full router takeover; CISA added it to KEV on Sept 25.
- Security
CVE-2026-95699: iSteamX Mobile App AWS IoT Policy Exposes Connected Device Data
A misconfigured AWS IoT policy in the iSteamX app let users reach wildcard MQTT topics, exposing other users' devices and profile data.
- News
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
A critical WordPress core flaw (CVE-2026-87902, CVSS 9.2) enabling unauthenticated RCE is under active exploitation hours after its Sept 22 patch.
- Security
CVE-2026-31377: Apache Doris FE Meta Service Authentication Bypass
Apache Doris FE meta service (CVE-2026-31377, CVSS 7.5) lets unauthenticated attackers reach internal metadata endpoints via spoofed node info.
- News
Check Point Warns of Hackers Exploiting Security Gateway VPN RCE Flaw
Check Point confirms active exploitation of CVE-2026-85102, a CVSS 9.8 pre-auth RCE in Security Gateway VPN certificate handling; CISA set a Sept 25 deadline.
- News
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
CVE-2026-94545 (CVSS 9.5) lets attacker-controlled input reach unescaped SVG output in Next.js ImageResponse, enabling RCE. Patched in 16.3.6.
- News
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
CVE-2026-65660 was labeled a low-impact spoofing bug, but full technical details show it enables authenticated remote code execution.
- News
WordPress Patches 'Click2Shell' Vulnerability
WordPress 7.1.1 patches a CSRF flaw that let attackers force theme installs and chain to full remote code execution on self-hosted sites.
- News
CISA Warns of Active Exploitation of Three Linux Kernel Flaws
CISA added three Linux kernel CVEs to its KEV catalog, ordering federal agencies to patch and forensically triage by end of day.
- News
Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
Check Point, Kaspersky, and Tanium all shipped patches this week — SQL injection and SSRF fixes lead the Kaspersky and Tanium advisories.
- News
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Unauthenticated attackers can run OS commands on Orkes Conductor via unsandboxed script evaluators. Fortinet blocked ~7,000 attempts in a week.
- News
New Check Point Flaw Lets Hackers Execute Code With Root Privileges
An unauthenticated stack overflow in Check Point's Security Management Server login process allows root-level remote code execution. CVSS 9.8.
- News
Critical Check Point Flaw Lets Unauthenticated Attackers Run Code as Root
A CVSS 9.8 stack overflow in Check Point's Security Management Server allows unauthenticated root RCE; Kaspersky and Tanium also patch flaws this week.
- News
ISC Patches 14 Vulnerabilities in BIND 9 DNS Server Software
ISC fixes 14 BIND 9 flaws, including 7 high-severity bugs that can crash named, exhaust memory, or poison DNS caches. No active exploitation reported.
- Security
CVE-2026-66269: Dell OpenManage Server Administrator Unsafe Reflection Flaw
Dell patches an unauthenticated unsafe-reflection flaw in OpenManage Server Administrator that lets remote attackers bypass protection mechanisms.
- News
Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day
Cisco patches CVE-2026-76460, a CVSS 10.0 ISE auth bypass exploited in the wild; CISA gives federal agencies until Sept. 19 to patch.
- News
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
ISC's BIND 9.20.29 and 9.21.26 fix 14 flaws, including an unauthenticated DoH request that can crash the named process.
- News
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
A critical Unbound DNSSEC validator heap overflow (CVE-2026-81642, CVSS 9.1) enables RCE via a malicious DNS zone; patch to 1.26.1.
- Security
CVE-2025-56563: Server-Side Request Forgery in Zenith Satellite Tracker
Unauthenticated SSRF in Zenith Satellite Tracker 1.0 lets attackers force the server to request internal and cloud metadata endpoints via sat_proxy.php.
- Security
CVE-2026-20284: SQL Injection in Cisco ISE SXP REST API
Authenticated SQL injection in Cisco ISE's SXP REST API (CVSS 9.1) lets admins view, modify, or crash the ISE policy database.
- News
240,000 Hit by Data Breach at Japan's Digital Agency
Hackers exploited a disclosed VPN vulnerability and a maintenance account to breach Japan's Digital Agency, exposing data on 240,000 people.
- News
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
A hardcoded JWT signing key in Issabel Framework lets attackers forge tokens and hijack Asterisk to run OS commands, under active exploitation.
- News
Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover
Two unauthenticated RCE flaws in The Events Calendar WordPress plugin risk takeover of 200,000+ sites; patches are now available.
- Security
Unauthenticated Privilege Escalation in JetFormBuilder ≤ 3.6.2 Allows Admin Account Creation
A critical flaw in JetFormBuilder ≤ 3.6.2 lets unauthenticated attackers register admin accounts via a crafted form-ID request.
- Security
Critical TrueBooker Plugin Flaw Enables Unauthenticated Admin Account Takeover
A CVSS 9.8 authorization bypass in TrueBooker lets unauthenticated attackers change any user's email and reset the password for full takeover.
- News
ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks
CVE-2026-84869 (CVSS 9.9) let attackers push and execute files through active ScreenConnect sessions, spreading VBScript payloads since August 20.
- News
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
CVE-2026-85706 (CVSS 10.0) lets unauthenticated attackers read arbitrary files via GitLab's commits API. Already actively exploited.
- News
Hackers Exploit Tencent Sogou Input Method Flaw to Deploy GrayRabbit
A China-aligned group chains a Sogou Input Method URI flaw with an outdated Chromium engine for one-click RCE, deploying the GrayRabbit backdoor.
- News
GitLab's CVSS 10 File-Read Flaw Draws Probes Within Hours of Disclosure
CVE-2026-85706, a CVSS 10 GitLab path traversal, hit CISA's KEV catalog after watchTowr spotted active probing the same day it was patched.
- Security
CVE-2026-86406: User Registration & Membership Purchase Flaw Lets Any Subscriber Escalate to Administrator
A missing capability check in User Registration & Membership's purchase flow lets any Subscriber claim an Administrator-mapped plan for free.
- Security
CVE-2026-17037: Kirki WordPress Plugin Unauthenticated Stored XSS
Unauthenticated Stored XSS in the Kirki WordPress plugin (≤ 6.2.0) via the comment parameter lets attackers inject persistent scripts. CVSS 7.2.
- Security
CVE-2026-49846: libks clean_uri() Path Traversal
A high-severity path traversal flaw in libks's clean_uri() lets unauthenticated attackers read arbitrary files via long URI paths.
- News
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Three threat clusters, including a state-sponsored actor, are exploiting two Cisco FMC flaws to steal credentials and deploy Qilin ransomware.
- News
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws
PaperCut shipped maintenance releases for two actively exploited CVEs after a Russian-speaking actor hit 395 orgs in 48 countries using AI agents.
- News
Over 3 Million WordPress Sites Exposed by Migration Plugin SQL Injection Flaw
A high-severity SQL injection in All-in-One WP Migration and Backup lets attackers chain trackback abuse into remote code execution.
- News
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Two chained GeoNetwork flaws let unauthenticated attackers achieve RCE. Ethiack found 121 exposed instances, 89% government or military.
- News
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Five critical flaws in WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP enable auth bypass, takeover, and RCE.
- News
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
CVE-2026-60004 lets any registered Gitea user hijack the server via a Git hook injection; CISA adds it to KEV after a reported miner deployment.
- News
Hackers Target Microsoft SharePoint RCE Chain With PoC Exploit
Attackers are probing a two-bug SharePoint chain — a JWT auth bypass plus a BCS flaw — after public PoCs made unauthenticated RCE reachable.
- Security
CISA Adds 2019 Microsoft SQL Server RCE Flaw to KEV Catalog
CISA added CVE-2019-1068, a seven-year-old Microsoft SQL Server RCE flaw, to its Known Exploited Vulnerabilities catalog after confirming active exploitation.
- Security
CISA Adds Ajax.NET Professional Deserialization RCE to KEV Catalog
CISA added CVE-2021-23758, a critical unauthenticated deserialization RCE in the end-of-life AjaxPro.2 library, to its Known Exploited Vulnerabilities catalog.
- Security
CVE-2026-65083: Critical Sandbox Provisioning Flaw in NVIDIA OpenShell
A CVSS 9.9 flaw in NVIDIA OpenShell's sandbox provisioning API can leave AI agent sandboxes with an incomplete block-list, opening the door to RCE.
- Security
CVE-2026-65093: Critical Sandbox Escape in NVIDIA OpenShell for Linux
NVIDIA disclosed a CVSS 9.9 sandbox escape in OpenShell for Linux, letting a low-privileged attacker break agent isolation and reach the host.
- News
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
CISA adds a maximum-severity Oracle WebLogic and HTTP Server flaw to the KEV catalog as active exploitation is confirmed in the wild.
- Security
CVE-2026-66897: Critical LXD Path Traversal Allows Host File Overwrite
A CVSS 9.9 path traversal flaw in LXD's template processing lets attackers with container permissions overwrite arbitrary host files.
- Security
CVE-2026-78207: Critical Prototype Pollution in exceljs-hardened Before v5.0.0
A CVSS 9.4 prototype pollution vulnerability in exceljs-hardened's deepMerge helper allows attackers to corrupt Object.prototype via crafted XLSX files.
- Security
CVE-2026-48749: Incus Malicious Image Arbitrary File Write and RCE (CVSS 9.9)
Critical Incus flaw lets a specially crafted container image read or write arbitrary host files, leading to remote code execution. Fixed in v7.2.0.
- Security
CVE-2026-48750: Incus Exec-Output Symlink Attack Enables Host File Write (CVSS 9.9)
Critical Incus flaw: if exec-output is a symlink, command output files are written to arbitrary host paths. Fixed in v7.2.0.
- Security
CVE-2026-62940: Incus Migration Security Restriction Bypass (CVSS 9.9)
Critical Incus flaw allows privilege escalation via unrestricted config overrides during cross-cluster instance migration. Patch to v7.3.0.
- Security
CVE-2026-62941: Incus Cross-Project Copy Privilege Escalation (CVSS 9.9)
Critical TOCTOU flaw in Incus lets restricted project users escalate privileges by copying instances across projects. Fixed in v7.3.0.
- Security
CVE-2026-78003: Critical SSRF via Path Traversal in Mailgun for WordPress Plugin
A critical SSRF vulnerability (CVSS 9.8) in Mailgun for WordPress ≤ 2.2.0 lets unauthenticated attackers make server-side requests via path traversal.
- News
Critical isolated-vm Vulnerability Leads to RCE on Host
A TOCTOU type confusion bug in isolated-vm lets sandboxed JavaScript escape the V8 isolate and execute arbitrary code on the host. Update to 6.2.0 or 7.0.1.
- Security
CVE-2026-71485: Critical Header Injection in Centrifugo Real-Time Messaging Server
Centrifugo before 6.9.0 propagates client-controlled ConnectRequest headers into internal context without sanitization, scoring CVSS 9.1 Critical.
- News
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
CVE-2026-73570, a CVSS 8.9 command injection flaw in Zimbra Collaboration, is actively exploited in the wild for unauthenticated RCE via SNMP.
- News
CISA Warns of Hackers Exploiting Critical MLflow Vulnerability
CVE-2026-64849 (CVSS 9.3): Active SSRF exploitation in MLflow lets attackers steal AWS cloud credentials via redirect bypass. Added to CISA KEV.
- News
Critical Elementor Pro Bug Exposes WordPress Sites to RCE Attacks
CVE-2026-32475 (CVSS 9.0): Unauthenticated attackers can upload PHP webshells via a loop desync flaw in Elementor Pro's file upload field.
- News
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
A critical unpatched flaw in isolated-vm allows sandboxed JavaScript code to escape its isolated environment and achieve host-level remote code execution.
- Security
CVE-2026-15065: Reserved Vulnerability Advisory
CVE-2026-15065 is currently reserved by MITRE. Details have not yet been publicly disclosed by the assigning CNA.
- Security
CVE-2026-75626: SpiderFoot Stored XSS via Unsanitized Correlation Titles
SpiderFoot fails to HTML-escape correlation titles from external scan data, enabling stored XSS attacks that execute scripts in the operator's browser.
- Security
CVE-2026-75627: Bastillion Authentication Bypass via Path Traversal
Bastillion's controller dispatcher fails to validate URI paths, letting unauthenticated attackers bypass auth filters and access administrative functions.
- Security
CVE-2026-55674: Discourse Unauthenticated HTML Injection via Cookie
A CVSS 9.3 critical flaw in Discourse allows unauthenticated attackers to inject arbitrary HTML using a crafted cookie value.
- Security
CVE-2026-71566: KubeVirt Auth Bypass via FakeFish Credential Ignore
CVSS 9.3 critical: KubeVirt's FakeFish BMC emulator ignores provided credentials, letting any user claim admin access.
- News
Critical GitLab GraphQL Flaw Lets Unauthenticated Attackers Delete Public Projects
CVE-2026-19478 (CVSS 9.4) lets unauthenticated attackers delete public GitLab projects via GraphQL. Self-managed CE/EE must patch to 19.2.4 immediately.
- News
Forminator WordPress Plugin Flaw Enables Unauthenticated RCE via PHP Upload
CVE-2026-15748 (CVSS 9.8) in Forminator Forms allows unauthenticated PHP webshell uploads for full RCE on 600,000+ WordPress sites. Patch to 1.56.2 now.
- News
Hackers Exploit macOS Screen Sharing Flaw to Deploy Monero Miner
Netherlands NCSC warns hackers are actively exploiting a macOS authentication bypass in Screen Sharing after public exploit code emerged, deploying Monero...
- Security
SiYuan Stored XSS via Database Menu Metadata (CVE-2026-73042)
SiYuan before v3.7.4 fails to escape database menu metadata, enabling stored XSS in group, view, and field-edit menus. CVSS 9.0 Critical.
- Security
SiYuan Column Width API Stored XSS (CVE-2026-73044)
SiYuan before v3.7.4 allows stored XSS via unescaped table column width values in style attributes. CVSS 9.0 Critical. Patch to v3.7.4.
- Security
SiYuan API Authentication Has No Rate Limiting (CVE-2026-73046)
SiYuan before v3.7.4 has no brute-force protection on its /api/* auth middleware, exposing the workspace to credential stuffing. CVSS 9.8.
- Security
SiYuan Stored XSS via Select Option Color Field (CVE-2026-73050)
SiYuan before v3.7.4 fails to escape the color field in attribute-view select options, enabling stored XSS at eight render sites. CVSS 9.0.
- News
Microsoft's Patch Tuesday Deluge Continues With August 2026 Updates
Microsoft's August 2026 Patch Tuesday drops critical fixes including a CVSS 9.8 Windows DNS RCE requiring no user interaction.
- Security
CVE-2026-50523: Microsoft PowerShell Local Command Injection Vulnerability
A command injection flaw in Microsoft PowerShell allows authorized local attackers to execute arbitrary code via improper input neutralization.
- Security
CVE-2026-73683: Laravel Socialite Facebook OIDC Authentication Bypass
Laravel Socialite's Facebook provider is vulnerable to OIDC id_token replay attacks due to missing nonce validation in getUserByOIDCToken().
- News
Max Severity SAP Commerce Cloud Flaw Now Targeted in Attacks
A critical RCE vulnerability in SAP Commerce Cloud, patched just days ago, is already being actively exploited in the wild.
- Security
CVE-2026-28154: Reflected XSS in WooCommerce WordPress Themes
High-severity reflected XSS in Samex and M.Anh WooCommerce themes allows attackers to inject malicious scripts via crafted URLs.
- News
Microsoft Patches LegacyHive Windows Zero-Day That Grants Admin Privileges
CVE-2026-62832 in Windows User Profile Service lets local users hijack registry hives and escalate to admin. Patch now via August Patch Tuesday.
- News
Cisco Warns of ASA and FTD VPN Flaw Actively Exploited to Crash Firewalls
CVE-2026-20349 (CVSS 8.6) in Cisco ASA and FTD allows unauthenticated remote attackers to crash SSL VPN devices via crafted HTTP requests — no workaround...
- News
Hackers Exploit Critical Adobe Commerce Flaw to Hijack Customer Accounts
Active exploitation of CVE-2026-71362 in Adobe Commerce and Magento is underway, with attackers targeting customer account takeover on e-commerce storefronts.
- News
SAP Commerce Cloud RCE Flaw Lets Unauthenticated Attackers Execute Arbitrary Code
CVE-2026-58231 scores CVSS 10.0 in SAP Commerce Cloud Data Hub Adapter — patch immediately as unauthenticated RCE with full system compromise is possible.
- News
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
A maximum-severity zero-day vulnerability in Metabase — the widely used open-source business analytics platform — allows remote attackers to gain...
- Security
CVE-2026-14450: MaaS API Auth Bypass via Forged HTTP Headers
A critical CVSS 9.9 flaw in the MaaS API allows any pod within a Kubernetes cluster to bypass the Kuadrant AuthPolicy gateway by forging X-MaaS-Username...
- Security
CVE-2026-20349: Cisco ASA and FTD Heap Inspection Vulnerability
Cisco Secure Firewall ASA and FTD contain a heap inspection vulnerability allowing unauthenticated remote attackers to crash devices and trigger a denial...
- Security
CVE-2026-47754: Reserved Vulnerability Under Coordinated Disclosure
CVE-2026-47754 is assigned but under coordinated disclosure embargo — details restricted pending vendor notification and patch availability.
- News
Critical Flaws Discovered in Belgian eID Software Used by 2 Million People
Security researchers uncovered critical vulnerabilities in Belgium's eID middleware software, affecting eight of the country's ten largest banks and over...
- Security
CVE-2026-19348: Critical Command Injection in Shenzhen Aitemi M300 Wi-Fi Repeater
A CVSS 9.8 critical command injection vulnerability in the Shenzhen Aitemi M300 Wi-Fi Repeater allows unauthenticated remote attackers to execute...
- Security
CVE-2026-19384: SQL Injection in SourceCodester Simple Doctors Appointment System
A remotely exploitable SQL injection vulnerability in SourceCodester Simple Doctors Appointment System 1.0 allows unauthenticated attackers to manipulate...
- News
Chinese Actor Weaponizes DeepSeek AI Agent to Attack Security Firm
Palo Alto Networks' Unit 42 documented the first confirmed autonomous AI-driven cyberattack campaign in the wild. A Chinese-speaking threat actor wired...
- News
Critical One-Click Vulnerability in Atlassian's Rovo AI Exposed Enterprise Data
Researchers discovered a parameter-to-prompt injection flaw in Atlassian Rovo AI that allowed a single malicious link click to exfiltrate Confluence API...
- News
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
A CVSS 10.0 zero-day in Metabase is actively exploited, granting unauthenticated attackers full admin access to the popular BI platform. No CVE identifier yet.
- News
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
A critical pre-auth RCE vulnerability in Progress Kemp LoadMaster has been added to CISA's Known Exploited Vulnerabilities catalog following 792...
- News
Truck Brake Controller's Safety Recall Doubled as Hidden Security Fix
A Black Hat USA 2026 presentation revealed that a 2024 safety recall covering 450,000 heavy trucks from Volvo, International, and Paccar secretly patched...
- Security
CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability
Critical unauthenticated command injection in Progress LoadMaster lets attackers run arbitrary OS commands. Listed on the CISA KEV catalog — patch immediately.
- News
Metabase SQLi Zero-Day Exploited in Customer Data-Theft Attacks
A CVSS 10.0 unauthenticated SQL injection zero-day in Metabase's open-source analytics platform was actively exploited against cloud and self-hosted...
- News
Hackers Run khunt Post-Exploitation Toolkit from Oracle Database
Threat actors exploited a SQL injection flaw to compile and execute the khunt post-exploitation toolkit directly inside an Oracle database using the...
- News
TP-Link Patches 15 Omada ZTP Flaws That Could Let Attackers Breach Networks
TP-Link has released patches for 15 vulnerabilities in the zero-touch provisioning mechanism of its Omada network ecosystem. Chained with two previously...
- Security
CVE-2026-18602: GL.iNet GL-MT3000 Remote Command Injection via VPN Hostname
A critical command injection vulnerability in GL.iNet GL-MT3000 routers (firmware up to 4.4.5) allows remote attackers to execute arbitrary OS commands by...
- Security
CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
A fail-open regression in Apache Tomcat's EncryptInterceptor allows attackers to bypass cluster communication encryption, exposing sensitive data in...
- Security
CVE-2026-39932: Critical RCE in OpenEMR via PHP Payload Injection
OpenEMR through 8.2.0 contains a critical remote code execution vulnerability allowing authenticated administrators to execute arbitrary OS commands by...
- Security
CVE-2026-41452: Krayin CRM Admin Account Takeover via Installer Middleware Bypass
A critical missing authentication vulnerability in Krayin CRM 2.2.4 allows unauthenticated attackers to overwrite the primary administrator account by...
- Security
CVE-2026-9198: IBM Langflow Code Injection Vulnerability
A critical unauthenticated code injection flaw in Langflow 1.0.0–1.10.0 allows attackers to chain two API endpoints to obtain a SUPERUSER token and...
- Security
CVE-2026-65321: PyAthena SQL Injection via Improper Quote Escaping
A critical SQL injection vulnerability in PyAthena prior to 3.35.4 allows unauthenticated attackers to inject arbitrary SQL through improper...
- News
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Adobe has patched a maximum-severity vulnerability in Campaign Classic (ACC), its enterprise marketing automation platform. The flaw carries a perfect...
- Security
CVE-2026-18352: WordPress User Access Manager Directory Traversal
The User Access Manager plugin for WordPress (up to v2.3.15) is vulnerable to unauthenticated directory traversal via the 'uamgetfile' parameter, allowing...
- News
Rails Patches Critical Active Storage Flaw with RCE Potential (CVE-2026-66066)
A critical vulnerability in Ruby on Rails Active Storage allows unauthenticated attackers to read arbitrary server files via crafted image uploads —...
- News
Ruby on Rails Patches Critical Vulnerability Enabling File Read and RCE
The Ruby on Rails team has released an emergency patch for a critical security flaw that allows unauthenticated attackers to read arbitrary files and...
- Security
CVE-2026-15414: WooCommerce Subscriptions Plugin Privilege Escalation (CVSS 8.8)
A high-severity privilege escalation vulnerability in the Subscriptions for WooCommerce plugin allows authenticated users to elevate their role to...
- Security
CVE-2026-3141: WordPress FormGent Plugin Unauthorized File Deletion (CVSS 9.1)
A critical unauthenticated file deletion vulnerability in the FormGent WordPress plugin allows attackers to delete arbitrary files without authentication,...
- Security
CVE-2026-11707: IBM WebSphere Application Server Admin Console XSS (CVSS 9.3)
Critical cross-site scripting vulnerability in IBM WebSphere Application Server's administrative console login page enables unauthenticated remote...
- Security
CVE-2026-15435: IBM App Connect Enterprise Path Traversal — Arbitrary File Write (CVSS 9.8)
Critical path traversal vulnerability in IBM App Connect Enterprise allows unauthenticated remote attackers to write arbitrary files on the system using...
- Security
CVE-2026-43830: Critical CVSS 9.8 Vulnerability — Details Embargoed
A newly published critical vulnerability (CVSS 9.8) registered as CVE-2026-43830 appeared in NVD on July 31, 2026 with full details under embargo....
- News
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
CISA has added a newly disclosed Cisco Secure Firewall Management Center zero-day to its Known Exploited Vulnerabilities catalog following confirmed...
- News
New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands
A critical remote code execution vulnerability in Gitea, tracked as CVE-2026-60004 with a CVSS score of 9.8, allows any user with ordinary repository...
- News
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
A maximum-severity flaw (CVE-2026-59726, CVSS 10.0) in the Ruflo open-source agent harness for Claude Code and OpenAI Codex allows unauthenticated remote...
- Security
CVE-2026-13423: Streamit WordPress Theme Allows Unauthenticated Arbitrary PHP Function Execution
The Streamit WordPress theme through version 4.5.0 exposes an unauthenticated AJAX route with no authorization or nonce verification, letting any...
- Security
CVE-2026-51252: Critical Buffer Overflow in ESP32-audioI2S MP3 Decoder
A critical CVSS 9.8 heap-based buffer overflow in the schreibfaul1 ESP32-audioI2S library allows an attacker to corrupt embedded device memory via a...
- Security
CVE-2026-51259: Integer Overflow in ESP32-audioI2S Causes PSRAM Buffer Overflow
A critical unsigned integer overflow in schreibfaul1's ESP32-audioI2S 3.4.5 causes undersized PSRAM buffer allocation, enabling out-of-bounds memory...
- Security
CVE-2026-63227: Koollab LMS SCORM File Upload Allows Webshell Deployment and RCE
A CVSS 9.9 critical vulnerability in Koollab LMS allows authenticated module designers to upload a SCORM package containing a PHP webshell to a publicly...
- Security
CVE-2026-63232: Koollab LMS SQL Injection and RCE via Unsafe Deserialisation
A critical CVSS 9.9 vulnerability in Koollab LMS allows authenticated attackers to exploit SQL injection and unsafe PHP deserialisation in the assessment...
- News
vBulletin Fixes Critical Pre-Auth RCE Flaw with Public Exploit
vBulletin has patched a critical unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary PHP code through template...
- Security
CVE-2026-48144: Apache Thrift c_glib TLS Certificate Host Mismatch (CVSS 9.1)
A critical TLS hostname verification flaw in Apache Thrift's c_glib bindings allows network-positioned attackers to conduct man-in-the-middle attacks...
- News
Hackers Target US Firms in FastJson RCE Zero-Day Attacks
Threat actors are actively exploiting an unpatched remote code execution vulnerability in Alibaba's FastJson Java library, targeting US enterprises with...
- News
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
A high-severity expression sandbox escape in n8n allows authenticated workflow editors to execute operating-system commands on the host server. Security...
- News
PTC Windchill Vulnerability Exploited in Ransomware Campaign
A critical unauthenticated deserialization flaw in PTC's Windchill PLM platform is being actively weaponized by the Cl0p ransomware group, targeting...
- News
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
Attackers are actively chaining CVE-2026-60137 and CVE-2026-63030 just three days after disclosure, targeting one of the largest attack surfaces on the...
- News
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patch Available
A critical unpatched remote code execution flaw in Alibaba's Fastjson 1.x library is being actively exploited in the wild. Tracked as CVE-2026-16723, the...
- Security
CVE-2026-57989: Microsoft Edge Origin Validation Error Allows Remote Information Disclosure
A high-severity origin validation error in Microsoft Edge (Chromium-based) enables an unauthenticated remote attacker to disclose sensitive information...
- Security
CVE-2026-57990: Microsoft Edge Exposes Local Files and Directories to Remote Attackers
A high-severity access control flaw in Microsoft Edge (Chromium-based) allows unauthenticated remote attackers to access files or directories that should...
- News
Fastjson 1.x RCE Actively Exploited With No Patch Available
Attackers are actively exploiting CVE-2026-16723, a critical remote code execution flaw in Alibaba's Fastjson 1.x library affecting Spring Boot...
- Security
CVE-2026-10818: WPForms Pro Arbitrary File Upload — Unauthenticated RCE
A high-severity vulnerability in WPForms Pro allows unauthenticated attackers to upload malicious files and achieve remote code execution. File type...
- Security
CVE-2026-57106: Critical SSRF in SAP Data Quality Enables Unauthenticated Privilege Escalation
A CVSS 10.0 server-side request forgery vulnerability in SAP Data Quality Management allows an unauthenticated attacker to escalate privileges over the...
- News
ChatGPT 'AgentForger' Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Zenity Labs disclosed a critical cross-site agent forgery vulnerability in ChatGPT's Workspace Agent Builder that let a single phishing link silently...
- News
Clop Ransomware Targets PTC Windchill and FlexPLM in Mass Data Theft Campaign
The Clop ransomware gang is exploiting CVE-2026-12569, a critical unauthenticated RCE flaw (CVSS 9.8) in PTC Windchill and FlexPLM, deploying webshells to...
- News
NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
Aikido Security's AI pentest agents audited NodeBB forum software in just six hours and surfaced eight high-severity vulnerabilities — including admin...
- Security
CVE-2026-12877: Critical SQL Injection in WordPress Project Management Plugin
An unauthenticated SQL injection flaw with a CVSS score of 9.1 affects the Project Management, Bug and Issue Tracking Plugin for WordPress before version...
- News
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Researchers at Guardio disclosed a now-patched vulnerability chain in the Adobe Acrobat Chrome extension dubbed HermeticReader, which could allow...
- News
Check Point Patches SmartConsole Zero-Day Exploited in Attacks
Check Point Software has patched an actively exploited zero-day vulnerability in its SmartConsole GUI admin panel. The flaw allowed attackers to...
- News
Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
A high-severity path traversal vulnerability in the open-source developer platform Windmill (CVE-2026-29059, CVSS 7.5) is under active exploitation,...
- Security
CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a critical deserialization of untrusted data vulnerability allowing unauthenticated attackers to execute arbitrary code over...
- Security
CVE-2026-16227: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate...
- Security
CVE-2026-16228: SQL Injection in SourceCodester Class and Exam Timetabling System via edit_schoolyr.php
A second SQL injection flaw in SourceCodester Class and Exam Timetabling System 1.0 exposes the /edit_schoolyr.php endpoint to remote unauthenticated...
- News
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
F5 has patched CVE-2026-42533, a critical heap buffer overflow in NGINX that allows unauthenticated remote attackers to crash worker processes and...
- News
HollowByte: 11-Byte Payload Triggers OpenSSL Server Memory Exhaustion
Researchers have disclosed HollowByte, a denial-of-service vulnerability that allows unauthenticated attackers to crash OpenSSL-based servers by sending a...
- Security
CVE-2026-16152: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability has been disclosed in SourceCodester Class and Exam Timetabling System 1.0. The flaw in /edit_rooma.php...
- Security
CVE-2026-16154: SQL Injection in SourceCodester Timetabling Room Management
A second SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 has been disclosed, this time affecting the /edit_room1.php...
- Security
CVE-2026-47868: VMware Avi Load Balancer Local Privilege Escalation
A local privilege escalation vulnerability in VMware Avi Load Balancer allows malicious local users to execute code as root. Versions 22.x through 32.1.1...
- Security
CVE-2026-47870: VMware Avi Load Balancer Authenticated Remote Code Execution
An authenticated privilege escalation flaw in VMware Avi Load Balancer enables network-connected users to execute remote code. CVSS 7.1 High — all...
- Security
CVE-2026-47871: VMware Avi Load Balancer Directory Traversal
A directory traversal vulnerability in VMware Avi Load Balancer allows authenticated network users to bypass file path validation and access arbitrary...
- News
HollowByte: 11-Byte Payload Triggers Memory Bloat DoS on OpenSSL Servers
A newly disclosed vulnerability dubbed HollowByte allows unauthenticated attackers to cause a denial-of-service condition on OpenSSL servers by sending a...
- News
Update Now: 7-Zip Fixes RCE Flaw Exploitable with Malicious Archives
7-Zip 26.02 patches a remote code execution vulnerability that lets attackers execute arbitrary code by convincing users to open specially crafted...
- Security
CVE-2024-23564: HCL Aftermarket EPC Business Logic Vulnerability Allows Password Disclosure
A critical business logic vulnerability (CVSS 9.1) in HCL Aftermarket EPC enables unauthenticated users to retrieve server-side passwords and redirect...
- News
Inc Ransomware Exploits Chained SonicWall SMA Zero-Days for Root Access
The Inc ransomware group is actively exploiting two chained zero-day vulnerabilities in SonicWall Secure Mobile Access appliances. When combined, the...
- Security
CVE-2026-38158: Critical SQL Injection in UReport v2.2.9 (CVSS 9.8)
A critical SQL injection vulnerability in the /ureport/datasource/previewData endpoint of ureport v2.2.9 allows unauthenticated attackers to exfiltrate...
- Security
CVE-2026-42533: NGINX Memory Corruption via Map Directive Regex (CVSS 8.1)
A vulnerability in NGINX Plus and NGINX Open Source allows map directives using regex matching with capture variables to trigger memory corruption when...
- Security
CVE-2026-61736: LightRAG Critical CORS Credential Bypass (CVSS 9.3)
LightRAG's default server configuration combines CORS_ORIGINS=* with allow_credentials=True, allowing any origin to make credentialed cross-origin...
- News
Zoom Warns of Critical Account Takeover Vulnerability (CVE-2026-53412, CVSS 9.8)
Zoom has disclosed a critical improper input validation flaw in its Windows desktop client and SDK that allows unauthenticated network attackers to hijack...
- Security
CVE-2023-4346: KNX Protocol Connection Authorization Option 1 Account Lockout Vulnerability
A vulnerability in KNX Association KNX Protocol Connection Authorization Option 1 allows an attacker to purge all devices without additional security...
- Security
CVE-2026-14453: Critical SSTI to RCE in Centreon Open Tickets (CVSS 9.6)
A critical Server-Side Template Injection vulnerability in Centreon's centreon-open-tickets module allows unauthenticated attackers to achieve Remote Code...
- Security
CVE-2026-57433: Perl Storable Signed Integer Overflow in SX_HOOK Deserialization
A CVSS 9.8 signed integer overflow in Perl's Storable module (before 3.41) allows a crafted SX_HOOK record to wrap an I32_MAX item count to -1, corrupting...
- Security
CVE-2026-58065: Apache Airflow Git Provider Disables SSH Host Key Verification
The Apache Airflow Git provider runs git-over-SSH with StrictHostKeyChecking=no by default, allowing a network-position attacker to silently impersonate...
- Security
CVE-2026-61500: Rejetto HFS Session Cookie Key Derived from Math.random()
Rejetto HFS 3.0.0–3.2.0 derives its session-cookie signing key from JavaScript's non-cryptographic Math.random(), and leaks generator outputs to...
- News
CISA Warns of Actively Exploited RCE Flaws in Joomla Extensions
CISA has added two Joomla extension vulnerabilities to its KEV catalog after attackers began exploiting arbitrary file upload flaws in iCagenda and...
- Security
CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco IOS 12.4 contains multiple CSRF vulnerabilities that allow remote attackers to execute arbitrary commands. The flaw has been added to the CISA Known...
- Security
CVE-2026-11964: WordPress User Registration Plugin PayPal Webhook Bypass
The User Registration & Membership WordPress plugin before 5.2.2 fails to verify PayPal webhook signatures, allowing unauthenticated attackers to forge...
- Security
CVE-2026-56260: Crawl4AI Arbitrary File Write in Docker API
A critical CVSS 9.1 vulnerability in Crawl4AI before 0.8.7 allows attackers to write arbitrary files anywhere on the host filesystem via the Docker API's...
- News
Attackers Exploit 'Ill Bloom' Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets
Security firm Coinspect has disclosed a critical crypto wallet flaw called Ill Bloom that exploits weak pseudorandom number generation in wallet seed...
- News
Six U-Boot Flaws Could Enable Stealthy Firmware Attacks on Embedded Devices
Researchers have discovered six vulnerabilities in the widely deployed U-Boot bootloader that could allow attackers to execute malicious code at boot...
- News
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
A critical stored XSS vulnerability in Zimbra's Classic Web Client allows attackers to deliver specially crafted emails that execute arbitrary code within...
- Security
CVE-2026-48939: iCagenda Unrestricted File Upload Allows PHP Code Execution
A critical unrestricted file upload vulnerability in the iCagenda Joomla event calendar plugin allows unauthenticated attackers to upload arbitrary PHP...
- Security
CVE-2026-56765: Vikunja Authorization Bypass Enables Permission Escalation
A critical authorization flaw in Vikunja task manager (CVSS 9.8) exposes share hashes via LinkSharing.ReadAll and allows task attachment access through...
- Security
CVE-2026-59792: JetBrains IntelliJ IDEA Remote Code Execution via Path Traversal
A critical RCE vulnerability (CVSS 9.6) in JetBrains IntelliJ IDEA before 2026.1.4 allows code execution through path traversal in project workspace ID...
- News
Microsoft Reins in RoguePlanet Zero-Day After Public PoC Release
Researcher 'Nightmare-Eclipse' published a proof-of-concept exploit for a Windows Defender vulnerability in early June after dropping several other...
- Security
CVE-2026-56291: Balbooa Forms Unrestricted File Upload Enables Full RCE
A critical unauthenticated file upload vulnerability in Balbooa Forms for Joomla allows attackers to upload executable files and achieve full remote code...
- News
Microsoft Patches RoguePlanet Zero-Day in Windows Defender After Public PoC
Microsoft has patched a Windows Defender zero-day vulnerability dubbed RoguePlanet after researcher 'Nightmare-Eclipse' released a working...
- Security
CVE-2026-35210: OpenCTI Authorization Bypass Allows Confidence Level and Object Marking Circumvention
An authentication bypass vulnerability in OpenCTI prior to 7.260326.0 allows any authenticated user with KNOWLEDGE_KNUPDATE permission to bypass...
- Security
CVE-2026-47831: Weak RNG in BOSH Windows Stemcell Builder Enables Remote Password Prediction
A cryptographically weak random number generator in the GenerateRandomPassword function of bosh-windows-stemcell-builder allows remote attackers to...
- News
CISA Orders Feds to Prioritize Patching Langflow Auth Bypass Flaw
CISA added CVE-2026-55255, a CVSS 9.9 IDOR authorization bypass in Langflow, to its Known Exploited Vulnerabilities catalog on July 7, ordering U.S....
- Security
CVE-2026-13019: Esri ArcGIS Portal Critical Unauthenticated API Access
A critical missing authentication vulnerability in Esri Portal for ArcGIS 12.1 and earlier allows remote unauthenticated attackers to access protected API...
- Security
CVE-2026-48908: JoomShaper SP Page Builder Unrestricted File Upload RCE
A critical unrestricted file upload vulnerability in JoomShaper's SP Page Builder allows unauthenticated attackers to upload arbitrary PHP files and...
- Security
Coolify CVE-2026-34037: CVSS 9.9 IDOR Enables Cross-Team Resource Takeover
A critical IDOR vulnerability in Coolify's cloneTo() Livewire action allows authenticated users to clone and take over resources across team boundaries...
- Security
Coolify CVE-2026-34047: Terminal WebSocket Authorization Bypass (CVSS 9.9)
A critical authorization bypass in Coolify's terminal WebSocket bootstrap routes allows authenticated users to access server terminals for resources...
- Security
Coolify CVE-2026-34048: Low-Privilege Terminal Escalation via WebSocket (CVSS 9.9)
A critical privilege escalation flaw in Coolify's terminal WebSocket routes lets any low-privileged team member connect to privileged server terminals by...
- Security
CVE-2026-14770: SQL Injection in SourceCodester Class and Exam Timetabling System
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows remote attackers to manipulate backend database...
- Security
CVE-2026-14771: SQL Injection in SourceCodester Class and Exam Timetabling System
An unauthenticated remote SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows attackers to manipulate the id...
- Security
CVE-2026-4321: Critical SQL Injection in Raera Destekz Plugin (No Patch Available)
A CVSS 9.8 critical SQL injection in the Destekz plugin by Raera - Ankara Web Design allows unauthenticated remote attackers full database access. The...
- Security
CVE-2026-49814: Dell PowerProtect Data Domain OS Command Injection
A high-severity OS command injection vulnerability in Dell PowerProtect Data Domain allows authenticated remote attackers to execute arbitrary commands...
- News
Critical Cursor AI Code Editor Flaws Could Lead to OS-Level Remote Code Execution
Two critical vulnerabilities (CVE-2026-50548, CVE-2026-50549) dubbed DuneSlide allow zero-click prompt injection attacks to escape Cursor IDE's sandbox...
- News
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Sysdig researchers documented the first fully autonomous AI-driven ransomware campaign, where threat actor JADEPUFFER used an AI agent to chain Langflow...
- News
CISA: Microsoft SharePoint RCE Flaw Now Actively Exploited
CISA added CVE-2026-45659 to its Known Exploited Vulnerabilities catalog, confirming active in-the-wild exploitation of a high-severity SharePoint...
- News
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
Anubis ransomware affiliates are exploiting CVE-2025-5777 (Citrix Bleed 2) for initial access while pairing BYOVD techniques and stolen supply chain...
- News
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
CISA has added a high-severity Microsoft SharePoint Server remote code execution vulnerability to its Known Exploited Vulnerabilities catalog following...
- Security
CVE-2026-14198: Fastify Middie Middleware Path Bypass (CVSS 9.1)
Critical path bypass vulnerability in @fastify/middie versions 9.1.0 through 9.3.2 allows attackers to evade middleware protection by exploiting a %2F...
- Security
CVE-2026-52186: Critical SQL Injection RCE in UTT nv518G Router
A critical SQL injection vulnerability (CVSS 9.8) in the UTT nv518G router allows unauthenticated remote attackers to execute arbitrary code via the...
- News
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
A critical pre-authentication remote code execution flaw in Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6) is under active exploitation attempts,...
- Security
CVE-2025-36359: IBM DevOps Session Hijacking Vulnerability (CVSS 8.1)
IBM DevOps Automation and IBM DevOps Loop fail to invalidate session IDs after expiration, allowing authenticated attackers to impersonate other users via...
- News
BlueHammer Vulnerability Exploited in Ransomware Attacks Before Microsoft Patch
The Microsoft Defender vulnerability CVE-2026-33825 was actively exploited as a zero-day by ransomware groups before Microsoft had the chance to release a...
- News
CISA: Windows BlueHammer Flaw Now Exploited by Ransomware Gangs
CISA has confirmed that ransomware gangs are actively exploiting BlueHammer, a Microsoft Defender privilege escalation vulnerability previously used in...
- News
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are actively weaponizing CVE-2026-33017, a critical unauthenticated RCE flaw in Langflow, to deploy a Monero miner via the lambsys...
- News
Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
A critical CVSS 9.8 authentication bypass vulnerability in Oracle E-Business Suite's Payments module is being actively exploited in the wild, according to...
- Security
CVE-2026-13550: SQL Injection in itsourcecode Baptism Information Management System 1.0
A high-severity SQL injection vulnerability has been identified in itsourcecode Baptism Information Management System 1.0, allowing remote attackers to...
- Security
CVE-2026-13551: SQL Injection in itsourcecode Baptism Information Management System 1.0 (editBaptism.php)
A second high-severity SQL injection vulnerability has been disclosed in itsourcecode Baptism Information Management System 1.0, this time affecting the...
- Security
CVE-2026-53434: Critical Apache Tomcat CRL Configuration Flaw (CVSS 9.1)
A critical vulnerability in Apache Tomcat's FFM/Panama TLS connector silently ignores invalid or malformed CRL configurations, causing the server to...
- News
Critical SimpleHelp Flaw Exploited to Deploy Djinn Infostealer
Hackers are actively exploiting CVE-2026-48558 in SimpleHelp remote support software to deploy Djinn Stealer, a previously undocumented cross-platform...
- News
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A heap overflow in libssh2's transport layer allows a malicious SSH server to achieve pre-authentication RCE against any connecting client. All versions...
- News
NAIC Says Only Public Data Stolen in ShinyHunters PeopleSoft Breach
The National Association of Insurance Commissioners confirms ShinyHunters exploited an Oracle PeopleSoft zero-day but says only publicly available data,...
- News
Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day Attacks
Nissan warns that current and former employees had data stolen after threat actors exploited an Oracle PeopleSoft zero-day vulnerability tied to the...
- Security
CVE-2026-13521: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability affects SourceCodester Class and Exam Timetabling System 1.0 via the course_year_section parameter in...
- Security
CVE-2026-13526: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection flaw in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate...
- Security
CVE-2026-49048: Critical SQL Injection in JoomCCK Joomla Extension
A critical unauthenticated SQL injection vulnerability (CVSS 9.8) in the JoomCCK Joomla extension allows attackers to read, modify, or delete database...
- Security
CVE-2026-58053: Newly Disclosed Informational Vulnerability
CVE-2026-58053 was disclosed on June 28, 2026 with an informational severity rating. NVD analysis is pending; no exploitation or vendor advisory has been...
- News
CISA Sets Urgent Deadline to Fix Cisco Flaw Actively Exploited in Attacks
CISA has added a Cisco Unified Communications Manager Server vulnerability to its Known Exploited Vulnerabilities catalog and ordered federal agencies to...
- Security
CVE-2025-55017: Apache IoTDB Critical Path Traversal Vulnerability
Critical path traversal vulnerability (CVSS 9.1) in Apache IoTDB affects versions 1.0.0 through 1.3.5 and 2.0.0 through 2.0.5. Users must upgrade...
- Security
CVE-2025-64152: Apache IoTDB Second Critical Path Traversal Flaw
A second critical path traversal vulnerability (CVSS 9.1) in Apache IoTDB affects versions 1.0.0 through 1.3.5 and 2.0.0 through 2.0.6. Patch to 1.3.6 or...
- Security
CVE-2026-52884: Notepad++ Trusted Directory Bypass via Path Traversal (CVSS 7.8)
A path traversal flaw in Notepad++ v8.9.6.1 allows attackers to bypass the trusted directory plugin verification check using path sequences, potentially...
- Security
CVE-2026-54350: Budibase Unauthenticated Database Read & Write (CVSS 10.0)
A critical CVSS 10.0 flaw in Budibase allows unauthenticated visitors of any published app to read every document in backing database collections and...
- Security
CVE-2026-54352: Budibase Zip Upload Path Traversal Enables Remote Code Execution (CVSS 9.6)
A critical path traversal vulnerability in Budibase's zip upload endpoint allows attackers to write arbitrary files outside the intended temp directory,...
- News
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
CISA has added CVE-2026-12569, a critical remote code execution vulnerability in PTC Windchill PDMlink and FlexPLM, to its Known Exploited Vulnerabilities...
- News
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
CISA has added CVE-2026-12569, a remote code execution flaw in PTC Windchill, to its Known Exploited Vulnerabilities catalog after confirming active...
- News
25-Year-Old Vulnerability Patched in Curl
Curl 8.21.0 patches 18 vulnerabilities including a 25-year-old mTLS connection reuse flaw (CVE-2026-8932) that could allow authentication bypass. With...
- News
Mandiant Reveals How Cisco SD-WAN Zero-Day CVE-2026-20245 Gained Root Access
Mandiant's post-incident analysis exposes a sophisticated multi-stage attack chain that exploited CVE-2026-20245 to plant a hidden root account on Cisco...
- Security
CVE-2026-12569: PTC Windchill and FlexPLM Remote Code Execution Vulnerability
A critical unauthenticated RCE vulnerability in PTC Windchill and FlexPLM (CVSS 9.3) has been added to CISA's Known Exploited Vulnerabilities catalog,...
- News
CVE-2026-20230: Cisco Unified CM WebDialer SSRF Now Exploited in the Wild
Cisco Unified Communications Manager and SME are under active attack via CVE-2026-20230, a high-severity SSRF flaw in the WebDialer component that can...
- News
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
A heap over-read vulnerability introduced in a 1997 FTP parser change allows a malicious co-user of a shared Squid proxy to read other users' cleartext...
- News
Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks
A high-severity use-after-free vulnerability lurking in Samsung's KNOX security framework for eight years left Galaxy devices from the S9 through S25...
- News
FFmpeg Fixes PixelSmash Flaw in Widely Used Video Decoder
FFmpeg has patched a critical vulnerability dubbed PixelSmash that could enable remote code execution on Jellyfin servers and denial-of-service conditions...
- News
Microsoft Fixes AutoGen Studio Flaw That Enabled Code Execution
Microsoft has patched the AutoJack vulnerability chain in AutoGen Studio, its AI agent prototyping interface, which allowed attackers to manipulate agents...
- News
New Exploit Bypasses Apple's Boot Defenses, Affects Millions of iPhones
The Usbliter8 exploit targets a hardware-level flaw in Apple A12 and A13 SecureROM boot chains that cannot be patched via software updates, leaving...
- News
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Four vulnerabilities dubbed DifyTap were disclosed in the open-source AI workflow platform Dify, enabling attackers to silently read AI conversations from...
- News
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Active exploitation of CVE-2026-4020 in the Gravity SMTP WordPress plugin has generated over 17 million malicious requests, allowing unauthenticated...
- News
Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure
CVE-2026-20253, a critical unauthenticated remote code execution flaw in Splunk Enterprise, is being actively exploited in the wild just days after public...
- Security
CVE-2026-54414: FileRise Path Traversal Enables Arbitrary File Write and Admin Takeover
A critical path traversal vulnerability in FileRise before 3.16.0 allows unauthenticated attackers to write arbitrary files and completely compromise...
- Security
CVE-2026-7515: BetterDocs Pro WordPress Plugin — Unauthenticated Local File Inclusion
A critical Local File Inclusion vulnerability in the BetterDocs Pro WordPress plugin (up to v3.8.0) allows unauthenticated attackers to include and...
- News
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 has released emergency security updates for two critical vulnerabilities in NGINX Open Source, including a CVSS 9.2 use-after-free flaw in the HTTP/3...
- News
FIFA Bug Exposes World Cup Streams to Remote Takeover
A security researcher discovered that FIFA's unenforced Microsoft Entra access controls could have allowed an attacker to hijack live World Cup broadcast...
- News
Attackers Hit Pair of Critical Fortinet Vulnerabilities the Vendor Disclosed in April
Multiple threat intelligence firms have confirmed active exploitation of two critical vulnerabilities in Fortinet's FortiSandbox product — security flaws...
- News
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
CISA has added a maximum-severity vulnerability in the Joomla Content Editor (JCE) plugin to its Known Exploited Vulnerabilities catalog, warning that the...
- News
Microsoft Working on Defender Patch for RoguePlanet Zero-Day
Microsoft has confirmed it is developing a security patch for the RoguePlanet zero-day vulnerability in Windows Defender, disclosed publicly last week,...
- News
The Top 10 Attack Surface Exposures in 2026
A comprehensive breakdown of the most dangerous attack surface exposures organizations face in 2026 — from exposed admin panels and credential reuse to...
- Security
CVE-2026-49772: The Events Calendar Blind SQL Injection (CVSS 9.3)
A critical blind SQL injection vulnerability in The Events Calendar WordPress plugin by StellarWP affects versions 6.15.12 through 6.16.2, allowing...
- Security
CVE-2026-49774: RD Station WordPress Plugin Remote Code Injection (CVSS 9.9)
A critical code injection vulnerability in the RD Station WordPress plugin allows unauthenticated remote code execution through Remote File Inclusion,...
- Security
CVE-2026-52715: GEO my WordPress Unauthenticated SQL Injection (CVSS 9.3)
A critical unauthenticated SQL injection vulnerability in GEO my WordPress versions 4.5.5 and earlier allows attackers to extract database contents...
- News
CISA Warns of Another Actively Exploited cPanel Plugin Flaw
CISA has added CVE-2026-54420, an actively exploited vulnerability in the LiteSpeed cPanel user-end plugin, to its Known Exploited Vulnerabilities catalog...
- Security
CVE-2026-39574: Critical SQL Injection in InPost Gallery WordPress Plugin
A critical unauthenticated SQL injection vulnerability (CVSS 9.3) in the InPost Gallery WordPress plugin allows attackers to extract sensitive database...
- Security
CVE-2026-6933: Unauthenticated RCE in Premmerce Dev Tools WordPress Plugin
A high-severity unauthenticated remote code execution vulnerability (CVSS 8.8) in Premmerce Dev Tools for WordPress allows attackers to execute arbitrary...
- News
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
Researchers at Obsidian Security disclosed a chain of three vulnerabilities in the widely deployed LiteLLM open-source AI gateway that allows a default...
- News
SearchLeak: New Attack Turned Microsoft 365 Copilot into 1-Click Data Theft Tool
Researchers disclosed SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that allows attackers to steal sensitive data from a...
- News
Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw
Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an authentication bypass vulnerability in PAN-OS GlobalProtect portals carrying a...
- Security
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Path Traversal Vulnerability
Cisco Catalyst SD-WAN Manager contains a directory path traversal vulnerability allowing an authenticated remote attacker to create or overwrite any file...
- News
Check Point VPN Zero-Day Exploited Since Early May by Qilin Ransomware
A critical zero-day vulnerability in Check Point's VPN products has been under active exploitation since at least early May 2026, with a Qilin ransomware...
- News
Google Confirms ShinyHunters Exploited Oracle PeopleSoft Zero-Day CVE-2026-35273
Google's Threat Intelligence Group confirmed in-the-wild exploitation of Oracle PeopleSoft zero-day CVE-2026-35273 by ShinyHunters, even as Oracle...
- Security
CVE-2026-5513: Bookly WordPress Plugin Stored XSS via Cookie
The Bookly scheduling plugin for WordPress contains a stored cross-site scripting vulnerability in versions up to 27.2, allowing unauthenticated attackers...
- News
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Splunk patches CVE-2026-20253, a CVSS 9.8 critical vulnerability enabling unauthenticated file operations and remote code execution in Splunk Enterprise.
- Security
CVE-2026-11849: IRM-IEI Remote Management Hardcoded Credentials
A critical CVSS 9.8 hardcoded credentials vulnerability in IEI Integration Corp's IRM-IEI Remote Management software allows unauthenticated remote...
- Security
CVE-2026-44990: sanitize-html XMP Element XSS Bypass (CVSS 9.3)
sanitize-html versions prior to 2.17.4 allow attacker-controlled content inside a disallowed xmp element to render as live HTML, enabling stored XSS.
- News
LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution
Security researchers have disclosed three now-patched vulnerabilities in LangGraph — including a critical chain that enables remote code execution on...
- Security
CVE-2026-10087: GitLab EE Stored XSS via Developer Role
GitLab EE versions 17.1 through 19.x are affected by a stored cross-site scripting vulnerability (CVSS 8.7) that allows an authenticated developer to...
- Security
CVE-2026-47365: WordPress Toolkit Argument Injection in cPanel & WHM
A critical CVSS 9.9 argument injection vulnerability in WordPress Toolkit before 6.11.0 allows remote authenticated users to bypass cross-tenant...
- Security
CVE-2026-47367: UID Enterprise Agent Command Injection via Improper Input Validation
A critical CVSS 9.9 command injection vulnerability in UID Enterprise Agent allows a low-privileged network attacker to execute arbitrary commands on the...
- Security
CVE-2026-47369: UniFi OS Privilege Escalation via Improper Input Validation
A critical CVSS 9.9 privilege escalation vulnerability in Ubiquiti UniFi OS allows a low-privileged network attacker to escalate privileges within UniFi...
- Security
CVE-2026-47370: UniFi OS Command Injection via Improper Input Validation
A critical CVSS 9.9 command injection vulnerability in Ubiquiti UniFi OS allows a low-privileged network attacker to execute arbitrary commands within...
- News
Microsoft Patches Exploited Exchange Server Vulnerability CVE-2026-42897
Microsoft has released a patch for CVE-2026-42897, an Exchange Server zero-day that has been under active exploitation since at least May 14, 2026. The...
- News
Oracle Mitigates PeopleSoft Zero-Day Exploited in Data Theft Attacks
Oracle has issued an emergency mitigation for CVE-2026-35273, a critical unauthenticated RCE flaw in PeopleSoft Suite being actively exploited by the...
- Security
CVE-2025-6254: WordPress Doctreat Core Plugin Privilege Escalation (CVSS 9.8)
A critical unauthenticated privilege escalation vulnerability in the Doctreat Core WordPress plugin allows attackers to register with elevated roles,...
- Security
CVE-2026-53469: migration-planner Missing Authorization on Bulk Delete
A critical missing authorization vulnerability (CVSS 9.1) in Red Hat's migration-planner allows any authenticated user to send a DELETE request to...
- Security
CVE-2026-53470: migration-planner IDOR Exposes Cross-Tenant S3 Pre-Signed URLs
A critical improper access control vulnerability (CVSS 9.6) in Red Hat's migration-planner allows an authenticated attacker to bypass ownership checks and...
- Security
CVE-2026-53471: migration-planner JWT Source ID Claim Not Validated in Agent API
A critical improper authentication vulnerability (CVSS 9.6) in Red Hat's migration-planner agent-API middleware allows authenticated agents to update...
- News
Microsoft Patches Record 206 Flaws Including Three Zero-Days and Critical RCE Bugs
Microsoft's June 2026 Patch Tuesday is the largest single release on record, fixing 206 vulnerabilities across its software portfolio — including three...
- News
Path Traversal Flaw in AI Dev Platform Langflow Exploited in Attacks
Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in Langflow, to write arbitrary files on exposed servers....
- News
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS
Six critical flaws in protobuf.js — the JavaScript/TypeScript Protocol Buffers library — can lead to remote code execution and denial-of-service in...
- News
Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE
A high-severity path traversal flaw (CVE-2026-5027, CVSS 8.8) in the AI application builder Langflow is being actively exploited with no patch available....
- Security
CVE-2026-47928: Adobe ColdFusion Critical RCE — CVSS 9.6
Adobe ColdFusion 2023.19 and 2025.8 are affected by a critical improper input validation flaw enabling unauthenticated remote code execution with scope change.
- News
CISA Gives Feds 3 Days to Patch Check Point VPN Bug Exploited as Zero-Day
CISA ordered federal agencies to patch a critical Check Point Remote Access VPN flaw within 3 days after Qilin ransomware affiliates were confirmed...
- News
New Veeam Vulnerability Exposes Backup Servers to RCE Attacks
Veeam patched a critical CVE-2026-44963 flaw in Backup and Replication allowing remote code execution on domain-joined servers. CVSS 9.4 — patch immediately.
- News
Veeam Backup and Replication RCE Flaw Lets Domain Users Run Remote Code
A critical CVE-2026-44963 flaw in Veeam Backup and Replication lets low-privilege domain users achieve remote code execution on backup servers. CVSS 9.4 —...
- News
CISA: Hackers Now Exploit SolarWinds Serv-U Flaw to Crash Servers
CISA added a high-severity SolarWinds Serv-U flaw to its KEV catalog after confirming attackers are actively exploiting it to crash file transfer servers.
- News
Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available
Cisco has disclosed active exploitation of CVE-2026-20245, a high-severity vulnerability in Catalyst SD-WAN Manager with a CVSS score of 7.8. No patch is…
- News
Cisco Warns of Unpatched SD-WAN Zero-Day Exploited in Attacks
Cisco has issued an emergency warning about an actively exploited, unpatched zero-day in Cisco Catalyst SD-WAN Manager (CVE-2026-20245) that enables root…
- Security
CVE-2026-35906: T3 Technology CPE Unauthenticated Root RCE via Debug CGI
An undocumented debug CGI endpoint in T3 Technology CPE devices (T625Pro v1.0.07, T6825G v1.0.03) allows unauthenticated remote attackers to execute arbitrary…
- Security
CVE-2026-49777: CVSS 10 Flaw in WooCommerce Product Slider Pro Enables Malware Implantation
A maximum-severity input validation vulnerability in Product Slider Pro for WooCommerce allows attackers to implant malicious software. Affects all versions…
- Security
CVE-2026-50208: TLS Bypass and Hard-Coded DES Keys Enable MITM Attacks
A critical CVSS 9.4 vulnerability disables TLS certificate validation via TrustAllCerts routines and combines this with hard-coded DES symmetric encryption…
- Security
CVE-2026-50211: Leftover Engineering Diagnostics Grant Malicious Apps NVRAM Write Access
A critical CVSS 9.8 vulnerability exposes factory-level diagnostic interfaces left in retail firmware builds, allowing malicious applications to gain write…
- Security
CVE-2026-6274: Critical Authentication Bypass in DTS Redline WR3200 Router
A critical authentication bypass vulnerability in the DTS Electronics Redline WR3200 router allows unauthenticated attackers to access functionality protected…
- News
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
CISA has added a critical remote code execution vulnerability in the Mirasvit Cache Warmer Magento extension to its Known Exploited Vulnerabilities catalog…
- News
Acer Working to Patch Max Severity Zero-Days in Wave 7 Routers
Acer is scrambling to address two maximum-severity zero-day vulnerabilities discovered in its Wave 7 mesh router lineup. Both flaws carry a CVSS score of 10.0…
- News
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
Redis has patched a use-after-free vulnerability in its blocking-client code that allows authenticated users to execute arbitrary OS commands on the database…
- News
Critical Kirki Flaw Exploited to Hijack WordPress Admin Accounts
Hackers are actively exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the widely-used Kirki Customizer Framework plugin for…
- News
VS Code Zero-Day Lets Hackers Steal GitHub Tokens in One Click
A security researcher has released exploit code for a Visual Studio Code zero-day vulnerability that allows attackers to steal GitHub authentication tokens by…
- Security
CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability
A Linux kernel vulnerability in the cgroups v1 release_agent feature allows local attackers to escalate privileges and escape containers. Added to CISA KEV…
- News
Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches
A stack-based buffer overflow flaw in HP OfficeConnect VoIP phones can be exploited remotely to achieve code execution, potentially allowing attackers to…
- News
One Line of Code Put Billions of Microsoft Android App Downloads at Risk
A single development-mode setting left in production code bypassed Android protections designed to prevent unauthorized apps from accessing Microsoft account…
- Security
CVE-2018-25427: Arm Whois 3.11 Stack-Based Buffer Overflow RCE
A critical stack-based buffer overflow vulnerability in Arm Whois 3.11 (CVSS 9.8) allows remote attackers to execute arbitrary code by supplying oversized…
- News
Critical Windows Netlogon RCE Flaw Now Exploited in Attacks
Belgium's national cybersecurity authority (CCB) has issued an urgent warning that threat actors are actively exploiting a recently patched critical Windows…
- Security
CVE-2026-10184: SourceCodester Hospital Records SQL Injection via Delete
A SQL injection vulnerability in SourceCodester Hospitals Patient Records Management System 1.0 allows remote attackers to extract database contents by…
- Security
CVE-2026-10185: SourceCodester Hospital Records SQL Injection via Save
A SQL injection vulnerability in SourceCodester Hospitals Patient Records Management System 1.0 enables remote attackers to extract database contents by…
- Security
CVE-2026-10187: Totolink N300RH Stack Buffer Overflow in WiFi Config
A critical-severity stack buffer overflow in the Totolink N300RH wireless router allows remote attackers to execute arbitrary code via a crafted KeyStr…
- Security
CVE-2026-48188: OTRS Database Layer SQL Injection — Authentication Bypass
A critical SQL injection vulnerability (CVSS 9.1) in OTRS and ((OTRS)) Community Edition allows unauthenticated attackers to bypass authentication entirely…
- Security
CVE-2026-49489: OpenCATS ATS SQL Injection via sortDirection Parameter
A SQL injection vulnerability in OpenCATS through 0.9.7.4 allows authenticated attackers to extract database contents by injecting malicious SQL via the…
- News
WP Maps Pro Bug Exploited to Create Admin Accounts on WordPress Sites
Hackers are actively exploiting a critical vulnerability in the WP Maps Pro WordPress plugin that allows unauthenticated attackers to create rogue…
- Security
CVE-2018-25405: Multiple SQL Injections in eNdonesia Portal 8.7
Multiple unauthenticated SQL injection vulnerabilities in eNdonesia Portal 8.7 allow attackers to extract sensitive database contents via the artid, cid,...
- Security
CVE-2018-25406: SQL Injection Across eNdonesia Portal 8.7 Modules
Multiple unauthenticated SQL injection vulnerabilities in eNdonesia Portal 8.7 expose the publisher, artikel, and info modules to database extraction...
- Security
CVE-2018-25411: SQL Injection in MGB OpenSource Guestbook 0.7.0.2
An unauthenticated SQL injection vulnerability in MGB OpenSource Guestbook 0.7.0.2 allows attackers to extract sensitive database contents via the 'id'...
- Security
CVE-2018-25412: Arbitrary File Upload RCE in Delta Sql 1.8.2
A critical unauthenticated arbitrary file upload vulnerability in Delta Sql 1.8.2 allows attackers to upload malicious PHP files and achieve remote code...
- Security
CVE-2026-10178: SQL Injection in Online Music Site 1.0 Admin Panel
A remotely exploitable SQL injection vulnerability has been disclosed in code-projects Online Music Site 1.0, affecting the Administrator PHP AdminEditAlbum…
- Security
CVE-2018-25391: HaPe PKH 1.1 Unauthenticated Record Deletion via Missing Authorization
HaPe PKH 1.1, a PHP-based web application, fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers to...
- Security
CVE-2026-10042: manga-image-translator RCE via Unsafe Python Deserialization
A critical CVSS 9.8 remote code execution vulnerability in manga-image-translator allows unauthenticated attackers to execute arbitrary commands by...
- Security
CVE-2026-10110: SQL Injection in Student Details Management System 1.0
A remotely exploitable SQL injection vulnerability in code-projects Student Details Management System 1.0 allows attackers to manipulate database queries...
- Security
CVE-2026-4290: WP Travel Pro Arbitrary User Deletion via Broken REST API Access Control
A critical CVSS 9.1 access control flaw in the WP Travel Pro WordPress plugin allows unauthenticated attackers to delete any user account — including...
- Security
CVE-2026-7459: WordPress Simple History Plugin Account Takeover
A broken authentication check in the Simple History WordPress plugin (versions up to 5.26.0) allows Subscriber-level users to take over any WordPress...
- Security
CVE-2026-7465: RCE in Spectra Gutenberg Blocks WordPress Plugin (CVSS 8.8)
A high-severity remote code execution vulnerability in the Spectra Gutenberg Blocks plugin for WordPress allows authenticated Contributor-level attackers...
- News
Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks
Fortinet's April hotfix for the actively exploited CVE-2026-35616 FortiClient EMS flaw is now seeing renewed exploitation, as attackers continue targeting...
- Security
CVE-2026-35676: phpMyFAQ Unauthenticated Password Reset Vulnerability
phpMyFAQ before 4.1.3 contains a CVSS 8.2 flaw allowing unauthenticated attackers to reset any account password without token validation, enabling full...
- Security
CVE-2026-4408: Samba OS Command Injection via Check Password Script
A CVSS 9.0 OS command injection flaw in Samba allows remote attackers to execute arbitrary commands on file servers and domain controllers using the %u...
- News
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Rapid7 discloses a critical CVSS 9.4 RCE in Gogs, the popular self-hosted Git service, letting any authenticated user run arbitrary code on the server.
- News
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
Microsoft condemns uncoordinated public zero-day disclosure, urging the security community to adopt CVD after removing a researcher's GitHub account.
- News
New Gogs Zero-Day Flaw Lets Hackers Get Remote Code Execution
An unpatched Gogs zero-day lets attackers gain RCE on internet-facing instances of the self-hosted Git service — no patch is currently available.
- Security
CVE-2026-32999: Comet Backup Server Code Execution via Signing Module
A CVSS 9.0 code execution flaw in Comet Backup's backup agent signing module allows an authenticated tenant administrator to execute arbitrary code on...
- Security
CVE-2026-8398: Daemon Tools Lite Embedded Malicious Code Vulnerability
CISA adds CVE-2026-8398 to KEV — a high-severity embedded malicious-code flaw in Daemon Tools Lite impacting confidentiality, integrity, and availability.
- News
CISA Gives Feds 4 Days to Patch Actively Exploited cPanel Plugin Flaw
CISA's emergency directive gives federal agencies four days to patch the actively exploited LiteSpeed cPanel plugin flaw being weaponized in the wild.
- News
CISA Urges Immediate Patching of Exploited LiteSpeed cPanel
CISA has added a LiteSpeed cPanel plugin zero-day to its Known Exploited Vulnerabilities catalog after active exploitation allowed attackers to execute scripts.
- News
Gitea Vulnerability Exposes Private Container Images without Authentication
A Gitea flaw lets unauthenticated remote attackers pull private container images from self-hosted deployments with no account or credentials required.
- News
Open Source DockSec Uses AI to Cut Through Vulnerability
DockSec, an OWASP incubator project, combines multiple container security scanners with AI-generated plain-English remediation guidance and exact Dockerfile.
- Security
CVE-2026-7374: KubeVirt virt-handler Symlink RCE (CVSS 9.9)
A critical symlink validation flaw in KubeVirt's virt-handler lets authenticated OpenShift users with edit access in a single namespace escalate to arbitrary.
- News
Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell
A hardcoded machineKey value in KnowledgeDeliver's configuration enabled ViewState deserialization attacks leading to remote code execution and web shell.
- News
KnowledgeDeliver Flaw Exploited as Zero-Day to Install Web
Attackers exploited a critical zero-day vulnerability in KnowledgeDeliver LMS servers to deploy the Godzilla web shell, giving persistent backdoor access to.
- News
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
A now-patched high-severity zero-day vulnerability in Digital Knowledge's KnowledgeDeliver LMS, a popular learning management system in Japan, was actively.
- News
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across
Microsoft has released updates fixing CVE-2026-45659, a CVSS 8.8 remote code execution vulnerability in SharePoint Server that requires no specialized.
- Security
CVE-2026-9525: SQL Injection in itsourcecode Electronic
A remotely exploitable SQL injection vulnerability in the admin panel of itsourcecode Electronic Judging System 1.0 allows attackers to manipulate database.
- News
Making Vulnerable Drivers Exploitable Without Hardware: The
A new technical analysis reveals that many Windows kernel-mode drivers can be exploited from user mode without the physical hardware they were designed...
- News
Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
CISA has added CVE-2026-9082, a SQL injection vulnerability in Drupal Core, to its Known Exploited Vulnerabilities catalog following confirmed in-the-wild...
- News
Drupal: Critical SQL Injection Flaw Now Targeted in Attacks
Drupal is warning that hackers are actively attempting to exploit a 'highly critical' SQL injection vulnerability, CVE-2026-9082, announced earlier this...
- News
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run
A maximum-severity vulnerability in the LiteSpeed User-End cPanel Plugin, tracked as CVE-2026-48172 with a CVSS score of 10.0, is under active...
- News
Ubiquiti Patches Three Max-Severity UniFi OS Vulnerabilities
Ubiquiti has released security updates fixing three CVSS 10.0 vulnerabilities in UniFi OS that allow unauthenticated remote attackers to fully compromise...
- News
'Underminr' Vulnerability Lets Attackers Hide Malicious
A newly disclosed vulnerability dubbed 'Underminr' affects approximately 88 million domains and enables attackers to bypass DNS filtering tools while...
- News
Microsoft Warns of Two Actively Exploited Defender
Microsoft has disclosed two Windows Defender vulnerabilities under active exploitation in the wild, including CVE-2026-41091 — a privilege escalation flaw...
- News
Trend Micro Warns of Apex One Zero-Day Exploited in the Wild
Trend Micro has patched an Apex One zero-day vulnerability actively exploited in attacks targeting Windows systems. The flaw, discovered in the company's...
- Security
CVE-2026-39531: WP Directory Kit Blind SQL Injection (CVSS
A critical blind SQL injection vulnerability in the WP Directory Kit WordPress plugin allows unauthenticated attackers to exfiltrate the entire WordPress...
- Security
CVE-2026-48207: Apache Fury PyFury Deserialization RCE
A critical deserialization vulnerability in Apache Fury's Python library PyFury allows attackers to bypass DeserializationPolicy validation hooks via the...
- News
Drupal Patches Highly Critical Vulnerability Exposing
Drupal has released an urgent security update for CVE-2026-9082, a highly critical flaw that can be exploited without authentication to achieve...
- News
Google Accidentally Exposed Details of Unfixed Chromium Flaw
Google accidentally leaked information about an unpatched Chromium vulnerability that allows JavaScript to continue running in the background even after...
- News
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE
Critical security vulnerabilities in SEPPMail Secure E-Mail Gateway — an enterprise email security appliance — could allow attackers to achieve remote...
- News
Verizon DBIR 2026: Vulnerability Exploitation Overtakes
Verizon's 2026 Data Breach Investigations Report reveals a landmark shift: vulnerability exploitation has surpassed credential abuse as the leading breach...
- Security
CVE-2026-7301: SGLang ROUTER Socket Exposes Unsafe
A critical CVSS 9.8 vulnerability in SGLang's multimodal AI runtime scheduler binds its ROUTER socket to 0.0.0.0 by default and passes incoming messages...
- Security
CVE-2026-7302: SGLang Unauthenticated Path Traversal
A critical CVSS 9.1 path traversal vulnerability in SGLang's multimodal AI runtime allows unauthenticated attackers to write arbitrary files anywhere the...
- News
Microsoft Exchange Zero-Day Under Attack, No Patch Available
A zero-day XSS vulnerability in Microsoft Exchange Server (CVE-2026-42897) is being actively exploited in the wild, allowing attackers to compromise...
- Security
CVE-2026-8785: SQL Injection in Hospital Management System
A high-severity SQL injection vulnerability (CVE-2026-8785, CVSS 7.3) has been disclosed in projectworlds Hospital Management System in PHP 1.0, allowing...
- News
Cisco Catalyst SD-WAN Controller Auth Bypass Actively
Cisco has patched a maximum-severity authentication bypass flaw in its Catalyst SD-WAN Controller that has already been exploited in limited attacks....
- News
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker
A heap buffer overflow in NGINX's rewrite module is under active exploitation, days after disclosure. The CVSS 9.2 flaw impacts both NGINX Plus and Open...
- News
Funnel Builder Flaw Under Active Exploitation Enables
Attackers are actively exploiting a critical vulnerability in the Funnel Builder WordPress plugin to inject malicious JavaScript into WooCommerce checkout...
- News
PoC Code Published for Critical NGINX Vulnerability
A proof-of-concept exploit has been released for a critical-severity NGINX vulnerability that has existed in the rewrite module for nearly two decades....
- Security
CVE-2020-37228: iDS6 DSSPro Digital Signage CAPTCHA
A critical CVSS 9.8 vulnerability in iDS6 DSSPro Digital Signage System 6.2 allows attackers to retrieve valid CAPTCHA codes from the login endpoint and...
- Security
CVE-2020-37239: libbabl 0.1.62 Broken Double-Free Detection
A critical CVSS 9.8 memory safety flaw in libbabl 0.1.62 allows attackers to call babl_free() twice on the same pointer without triggering the library's...
- Security
CVE-2026-45402: Open WebUI File ID Authorization Bypass
A high-severity authorization bypass in Open WebUI prior to 0.9.5 allows authenticated users to attach arbitrary files to resources they do not own via...
- Security
DAEMON Tools Lite Supply Chain Attack via Trojanized
A supply chain attack compromised official DAEMON Tools Lite installation packages distributed from daemon-tools.cc between April 8 and May 5, 2026,...
- News
Avada Builder WordPress Plugin Flaws Allow Site Credential
Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow hackers to read arbitrary files...
- News
Funnel Builder WordPress Plugin Bug Exploited to Steal
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript into WooCommerce checkout...
- News
Microsoft Warns of Exchange Zero-Day Flaw Exploited in Attacks
Microsoft shared mitigations for a high-severity Exchange Server vulnerability being actively exploited that allows threat actors to execute arbitrary...
- Security
CVE-2026-42457: vCluster Platform Stored XSS via templateRef Name Field
A stored cross-site scripting vulnerability in vCluster Platform allows attackers to inject and execute arbitrary JavaScript via the name field of a...
- Security
CVE-2026-44212: PrestaShop Stored XSS in Customer Service
A stored Cross-Site Scripting vulnerability (CVSS 9.3) in PrestaShop's back-office Customer Service view allows unauthenticated attackers to inject...
- News
18-Year-Old NGINX Rewrite Module Flaw Enables
Researchers have disclosed multiple critical vulnerabilities in NGINX Plus and NGINX Open Source, including a heap buffer overflow in...
- News
18-Year-Old NGINX Vulnerability Allows DoS and Potential RCE
An autonomous scanning system has uncovered an 18-year-old flaw in the NGINX open-source web server that can be exploited for denial of service and, under...
- News
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours
Threat actors began exploiting CVE-2026-44338, a missing authentication flaw in the PraisonAI multi-agent orchestration framework, within just four hours...
- News
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI
This week's threat roundup covers an actively exploited PAN-OS RCE granting root access, Anthropic's Mythos AI finding a cURL memory safety bug, AI...
- Security
CVE-2026-20182: Cisco Catalyst SD-WAN Controller
A critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Controller and Manager allows an unauthenticated remote attacker to bypass...
- News
Microsoft May 2026 Patch Tuesday: 137 Flaws Fixed, Zero
Microsoft's May 2026 Patch Tuesday addresses 137 vulnerabilities including nine critical flaws — but for the first time in two years, not a single...
- News
New Critical Exim Mailer Flaw Allows Remote Code Execution
A critical vulnerability in certain configurations of the Exim open-source mail transfer agent allows unauthenticated remote attackers to execute...
- Security
CVE-2026-8043: Ivanti Xtraction File Control & HTML
A critical vulnerability in Ivanti Xtraction before version 2026.2 allows remote authenticated attackers to read sensitive files and write arbitrary HTML...
- Security
CVE-2026-8053: MongoDB Time-Series Out-of-Bounds Write
An authenticated user with database write privileges can trigger an out-of-bounds memory write in the mongod process via a flaw in MongoDB Server's...
- News
Hackers Used AI to Develop First Known Zero-Day 2FA Bypass
Google has disclosed a landmark discovery: an unknown threat actor used an AI system to develop a zero-day exploit in the wild — the first confirmed...
- News
Skoda Data Breach Hits Online Shop Customers
Hackers exploited a vulnerability in Skoda's online shop portal to access customer personal data including names, addresses, email addresses, and phone...
- News
Canvas Login Portals Hacked in Mass ShinyHunters Extortion
ShinyHunters has struck education technology giant Instructure again, exploiting a fresh vulnerability to deface Canvas login portals across hundreds of...
- News
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS
The Apache Software Foundation has released urgent security updates for the Apache HTTP Server addressing a severe vulnerability in the HTTP/2 protocol...
- News
Exploit Frenzy Threatens Millions via Critical cPanel
A critical authentication bypass flaw in cPanel/WHM has triggered a wave of exploit activity, with multiple proof-of-concept exploits now public and...
- News
Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation
Ivanti has disclosed a high-severity improper input validation vulnerability in Endpoint Manager Mobile (EPMM) that is being actively exploited in the...
- News
Ollama Out-of-Bounds Read Flaw Allows Remote Process Memory
Researchers have disclosed a critical out-of-bounds read vulnerability in Ollama that enables remote unauthenticated attackers to leak the entire process...
- News
PAN-OS RCE Exploit Under Active Use Enabling Root Access
Palo Alto Networks has disclosed that CVE-2026-0300, a critical CVSS 9.3 buffer overflow in the PAN-OS User-ID Authentication service, is being actively...
- News
Ivanti Customers Confront Yet Another Actively Exploited
Attackers are actively exploiting a new zero-day vulnerability in Ivanti Endpoint Manager Mobile (EPMM), the latest in a long series of critical flaws...
- News
CISA Adds Actively Exploited Linux Root Access Bug
The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2026-31431, a Linux kernel privilege escalation flaw enabling root access, to its...
- Security
CVE-2026-5324: WordPress Brizy Page Builder Unauthenticated
The Brizy Page Builder plugin for WordPress contains a critical unauthenticated Stored Cross-Site Scripting flaw in versions up to 2.8.11, enabling...
- Security
CVE-2026-35547: FreeBSD libnv Heap Buffer Overflow Allows
A critical heap buffer overflow in FreeBSD's libnv library allows an unprivileged program to write outside heap allocation bounds during message header...
- News
AI Finds 38 Security Flaws in Electronic Health Record
Security researchers using AI-assisted analysis discovered 38 vulnerabilities in OpenEMR, an open-source electronic health record platform used by more...
- News
Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now
The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been...
- News
Google Fixes CVSS 10 Gemini CLI RCE and Cursor Flaws Enable
Google has patched a maximum severity vulnerability in its Gemini CLI npm package and GitHub Actions workflow that allowed unprivileged attackers to...
- News
cPanel & WHM Emergency Update Fixes Critical Auth Bypass Bug
cPanel and WebHost Manager have released an emergency patch for a critical authentication bypass vulnerability that allows attackers to gain control panel...
- News
Critical GitHub Vulnerability Exposed Millions of Repositories
A critical remote code execution vulnerability, CVE-2026-3854, was found to impact GitHub.com and GitHub Enterprise Server, potentially exposing millions...
- News
GitHub Fixes RCE Flaw That Gave Access to Millions of Private Repos
GitHub has patched CVE-2026-3854, a critical remote code execution vulnerability exploitable via a single HTTP request that could have granted attackers...
- Security
CVE-2024-1708: ConnectWise ScreenConnect Path Traversal
ConnectWise ScreenConnect contains a path traversal vulnerability (CVE-2024-1708) that allows attackers to execute remote code or directly access...
- News
Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
Cybersecurity researchers have disclosed CVE-2026-25874, a critical unauthenticated remote code execution vulnerability (CVSS 9.3) in Hugging Face's...
- News
Hackers Are Exploiting a Critical LiteLLM Pre-Auth SQLi Flaw
Threat actors are actively exploiting CVE-2026-42208, a critical pre-authentication SQL injection vulnerability in the LiteLLM open-source LLM gateway,...
- News
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw
Cybersecurity researchers have disclosed a critical remote code execution vulnerability in GitHub.com and GitHub Enterprise Server that allows an...
- Security
CVE-2026-7224: SQL Injection in Pizzafy Ecommerce System 1.0
A high-severity SQL injection vulnerability has been discovered in SourceCodester Pizzafy Ecommerce System 1.0, allowing remote attackers to manipulate...
- News
Firefox Vulnerability Allows Tor User Fingerprinting Across
A high-severity Firefox vulnerability (CVE-2026-6770) exploits the internal ordering of IndexedDB database names to generate a stable 44-bit fingerprint...
- News
Incomplete Windows Patch Opens Door to Zero-Click Attacks
A Microsoft Windows vulnerability originally patched in a prior Patch Tuesday was incompletely remediated, leaving a residual attack surface that...
- Security
CVE-2026-6785: Memory Safety Bugs in Firefox and Thunderbird Enable Arbitrary Code Execution
A CVSS 8.1 high-severity collection of memory safety bugs affects Firefox 149, Firefox ESR 140.9, Firefox ESR 115.34, Thunderbird 149, and Thunderbird ESR...
- Security
CVE-2026-7037: Unauthenticated OS Command Injection in Totolink A8000RU
A critical CVSS 9.8 OS command injection vulnerability in the Totolink A8000RU router allows unauthenticated remote attackers to execute arbitrary...
- Security
CVE-2026-7077: SQL Injection in itsourcecode Courier
A remotely exploitable SQL injection vulnerability has been disclosed in itsourcecode Courier Management System 1.0, affecting the edit_parcel.php file...
- News
LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure
A high-severity SSRF vulnerability in LMDeploy, a widely used open-source LLM deployment toolkit, was actively exploited in the wild less than 13 hours...
- News
Microsoft Patch Tuesday, March 2026 Edition
Microsoft patched 77 security vulnerabilities in March 2026 with no actively exploited zero-days, a welcome reprieve following February's five-zero-day...
- News
New 'Pack2TheRoot' Flaw Gives Hackers Root Linux Access
A newly disclosed vulnerability in the PackageKit daemon, dubbed Pack2TheRoot, allows local Linux users to escalate privileges to root by abusing the...
- News
Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks
CISA has confirmed that a cross-site scripting vulnerability in Zimbra Collaboration Suite is being actively exploited in the wild, with over 10,000...
- News
Patch Tuesday, April 2026 Edition
Microsoft released patches for 167 security vulnerabilities in April 2026, including an actively exploited SharePoint Server zero-day and the publicly...
- News
CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal
CISA has added four actively exploited vulnerabilities affecting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X routers to its Known...
- Security
CVE-2025-29635: D-Link DIR-823X Command Injection
A command injection flaw in end-of-life D-Link DIR-823X routers allows authenticated remote attackers to execute arbitrary OS commands. CISA has added...
- News
Hackers Actively Exploiting Breeze Cache File Upload Bug in WordPress Attacks
Threat actors are mass-exploiting a critical unauthenticated file upload vulnerability in the Breeze Cache WordPress plugin, uploading PHP webshells to...
- Security
CVE-2018-25270: ThinkPHP 5.0.23 Remote Code Execution via Routing Parameter
ThinkPHP 5.0.23 contains a critical unauthenticated remote code execution vulnerability allowing attackers to invoke arbitrary PHP functions via a crafted...
- Security
CVE-2018-25272: ELBA5 5.8.0 RCE via Default Database
ELBA5 5.8.0 contains a critical remote code execution vulnerability where default database connector credentials allow attackers to connect to the...
- News
New Mirai Campaign Exploits RCE Flaw in End-of-Life D-Link
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability in end-of-life D-Link DIR-823X...
- News
Over 1,300 Microsoft SharePoint Servers Vulnerable to Ongoing Spoofing Attacks
More than 1,300 internet-facing Microsoft SharePoint servers remain unpatched against a spoofing vulnerability exploited as a zero-day, with active...
- Security
CVE-2026-21997: Oracle Life Sciences Empirica Signal
A high-severity vulnerability in Oracle Life Sciences Empirica Signal versions 9.2.1-9.2.3 allows a low-privileged attacker with network access via HTTP...
- Security
CVE-2026-22753: Spring Security Filter Chain Bypass via PathPattern Matcher
A high-severity flaw in Spring Security allows security filter chains to silently fail to match requests when PathPatternRequestMatcher.Builder is used to...
- News
Actively Exploited Apache ActiveMQ Flaw Impacts 6,400
Shadowserver found over 6,400 Apache ActiveMQ servers exposed online and vulnerable to ongoing attacks exploiting a high-severity code injection...
- Security
CVE-2025-2749: Kentico Xperience Path Traversal
Kentico Xperience contains a path traversal vulnerability allowing an authenticated user's Staging Sync Server to upload arbitrary data to relative path...
- Security
CVE-2026-29646: OpenXiangShan NEMU RISC-V Hypervisor
A critical privilege escalation flaw in OpenXiangShan NEMU's RISC-V hypervisor extension allows a VS-mode guest write to the supervisor interrupt-enable...
- Security
CVE-2026-5965: NewSoftOA Critical OS Command Injection
A critical OS command injection vulnerability in NewSoftOA by NewSoft allows unauthenticated local attackers to inject and execute arbitrary OS commands...
- Newsletter
Apr 21 Digest: Vercel AI Tool Breach, DPRK $290M, ActiveMQ
Vercel confirms breach through a compromised third-party AI coding tool; North Korean hackers attributed to a $290 million crypto theft; 6,400 Apache...
- News
Anthropic MCP Design Vulnerability Enables RCE, Threatening
Cybersecurity researchers have discovered a critical by-design weakness in the Model Context Protocol architecture that enables arbitrary command...
- News
SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious
A critical CVSS 9.8 command injection vulnerability in the SGLang AI inference framework allows attackers to achieve remote code execution by supplying a...
- Security
CVE-2026-20122: Cisco Catalyst SD-WAN Manager Incorrect Use
Cisco Catalyst SD-WAN Manager contains a privileged API misuse vulnerability that allows an attacker to upload a malicious file to the local file system...
- Security
CVE-2026-6595: SQL Injection in ProjectsAndPrograms School
A medium-severity SQL injection vulnerability has been disclosed in ProjectsAndPrograms School Management System, allowing remote attackers to manipulate...
- News
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables
A critical authentication bypass vulnerability in nginx-ui, a popular open-source web-based Nginx management interface, is being actively exploited to...
- News
Microsoft Drops Its Second-Largest Monthly Patch Batch on Record
Microsoft's April 2026 Patch Tuesday addressed 169 CVEs — the second-largest monthly update in company history — including one actively exploited...
- News
Microsoft Issues Patches for SharePoint Zero-Day and 168
Microsoft's April 2026 Patch Tuesday addresses a record 169 security vulnerabilities including a SharePoint zero-day actively exploited in the wild, 8...
- News
ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force
This week's threat roundup covers an unpatched Microsoft Defender zero-day, active SonicWall brute-force campaigns, a 17-year-old Excel RCE vulnerability...
- News
In Other News: Satellite Cybersecurity Act, $90K Chrome
This week's cybersecurity roundup covers the proposed Satellite Cybersecurity Act, a $90,000 Chrome heap overflow bug, a 16-year-old hacker arrest,...
- Security
CVE-2026-40492: SAIL XWD Codec Heap Buffer Overflow (CVSS
A critical heap buffer overflow in the SAIL image library's XWD codec arises from a mismatch between pixel depth and bits-per-pixel, enabling arbitrary...
- Security
CVE-2026-40493: SAIL PSD Codec Buffer Overflow via channels
A critical out-of-bounds write in SAIL's PSD codec occurs when the pixel buffer is allocated using a raw header formula that doesn't account for actual...
- Security
CVE-2026-40494: SAIL TGA Codec RLE Decoder Asymmetric
A critical heap write-past-end vulnerability in SAIL's TGA codec RLE decoder stems from an asymmetric bounds check that correctly validates run-packets...
- Security
CVE-2026-6518: WordPress CMP Plugin Arbitrary File Upload
The CMP Coming Soon & Maintenance Plugin for WordPress contains a critical arbitrary file upload flaw that allows subscriber-level authenticated users to...
- News
CISA Flags Apache ActiveMQ Flaw as Actively Exploited in Attacks
CISA has added a high-severity Apache ActiveMQ vulnerability to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the...
- Security
CVE-2026-40322: SiYuan XSS via Mermaid innerHTML Injection
SiYuan knowledge management versions 3.6.3 and below render Mermaid diagrams with loose security, allowing attacker-controlled javascript: URLs to execute...
- News
Orthanc DICOM Vulnerabilities Lead to Crashes, RCE
Multiple vulnerabilities in the widely-used Orthanc open-source DICOM server expose medical imaging systems to denial-of-service, information disclosure,...
- Security
CVE-2025-57735: Apache Airflow JWT Token Not Invalidated on Logout
A critical CVSS 9.1 vulnerability in Apache Airflow fails to invalidate JWT tokens upon user logout, allowing intercepted tokens to be reused for...
- Security
CVE-2026-34177: Canonical LXD Incomplete VM Restriction
A critical CVSS 9.1 flaw in Canonical LXD versions 4.12 through 6.7 omits raw.apparmor and raw.qemu.conf from the VM low-level option denylist, allowing...
- Security
CVE-2026-34178: Canonical LXD Backup Import Path
A critical CVSS 9.1 vulnerability in Canonical LXD before 6.8 allows authenticated attackers to bypass project restrictions during backup import. The...
- Security
CVE-2026-34578: OPNsense LDAP Injection Enables Auth Bypass
A high-severity LDAP injection vulnerability in OPNsense's authentication connector allows unauthenticated attackers to bypass login controls by injecting...
- Security
CVE-2026-5977: TOTOLINK A7100RU Critical OS Command
A critical OS command injection vulnerability (CVSS 9.8) in TOTOLINK A7100RU routers allows unauthenticated remote attackers to execute arbitrary system...
- Security
CVE-2026-5978: TOTOLINK A7100RU Critical OS Command
A second critical OS command injection vulnerability (CVSS 9.8) in TOTOLINK A7100RU routers allows unauthenticated remote attackers to execute arbitrary...
- Security
CVE-2026-6004: SQL Injection in code-projects Simple IT
A remotely exploitable SQL injection vulnerability has been disclosed in code-projects Simple IT Discussion Forum 1.0, affecting the /delete-category.php...
- News
Adobe Reader Zero-Day Exploited via Malicious PDFs Since
Threat actors have been exploiting an unpatched zero-day in Adobe Reader since at least November 2025, using specially crafted PDFs to fingerprint victims...
- News
EngageLab SDK Flaw Exposed 50M Android Users, Including 30M
A now-patched security vulnerability in the widely used EngageLab Android SDK allowed apps on the same device to bypass the Android security sandbox and...
- News
Hackers Exploiting Acrobat Reader Zero-Day Flaw Since
Attackers have been silently exploiting an unpatched zero-day vulnerability in Adobe Acrobat Reader since at least November 2025, using malicious PDFs to...
- Security
CVE-2026-39888: PraisonAI Sandbox Escape Enables Remote
A critical sandbox escape vulnerability in PraisonAI's multi-agent framework allows attackers to bypass the Python code execution sandbox, defeating the...
- Security
CVE-2026-39890: PraisonAI YAML Injection Achieves Remote
A critical code injection vulnerability in PraisonAI's AgentService allows attackers to craft malicious YAML files using dangerous js-yaml tags such as...
- News
13-Year-Old Bug in ActiveMQ Lets Hackers Remotely Execute
Security researchers discovered a remote code execution vulnerability in Apache ActiveMQ Classic that went undetected for 13 years, allowing attackers to...
- Security
CVE-2021-4473: Tianxin Behavior Management System
A critical unauthenticated command injection vulnerability in the Tianxin Internet Behavior Management System's Reporter component allows attackers to...
- Security
CVE-2026-22679: Weaver E-cology 10.0 Unauthenticated Remote
A critical unauthenticated RCE vulnerability in Weaver (Fanwei) E-cology 10.0 allows attackers to execute arbitrary commands by abusing an exposed Dubbo...
- Security
CVE-2026-39397: PayloadCMS Puck Plugin Access Control Bypass
A critical access control bypass (CVSS 9.4) in the @delmaredigital/payload-puck PayloadCMS plugin exposes all /api/puck/* CRUD endpoints without...
- Security
CVE-2026-5731: Firefox and Thunderbird Critical Memory
Mozilla has patched critical memory safety bugs in Firefox, Firefox ESR, and Thunderbird that showed evidence of memory corruption. Exploiting these flaws...
- News
Hackers Exploit Critical Flaw in Ninja Forms WordPress
Attackers are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in the Ninja Forms File Uploads premium add-on for...
- News
Medusa Ransomware Is Fast to Exploit Fresh Vulnerabilities
SecurityWeek reports that the Medusa ransomware group has developed a dangerous capability: rapidly weaponizing newly disclosed vulnerabilities —...
- Security
CVE-2026-35392: Critical Path Traversal in goshs Go HTTP
A critical CVSS 9.8 path traversal vulnerability in goshs, a SimpleHTTPServer written in Go, allows unauthenticated attackers to write arbitrary files via...
- Security
CVE-2026-5637: SQL Injection in projectworlds Car Rental
A remotely exploitable SQL injection vulnerability (CVE-2026-5637) has been disclosed in projectworlds Car Rental System 1.0. The flaw exists in...
- Security
CVE-2019-25662: ResourceSpace 8.6 Unauthenticated SQL
An unauthenticated SQL injection vulnerability in ResourceSpace 8.6 allows attackers to execute arbitrary database queries via the 'ref' parameter in...
- Security
CVE-2026-5554: SQL Injection in Concert Ticket Reservation
A remotely exploitable SQL injection vulnerability has been disclosed in code-projects Concert Ticket Reservation System 1.0, affecting the...
- Security
CVE-2026-5555: SQL Injection in Concert Ticket Reservation
An unauthenticated SQL injection vulnerability has been disclosed in code-projects Concert Ticket Reservation System 1.0, affecting the login.php file via...
- Security
CVE-2026-5575: SQL Injection in SourceCodester Record
A remotely exploitable SQL injection vulnerability has been disclosed in SourceCodester/jkev Record Management System 1.0, affecting the Login page's...
- News
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
Fortinet has released emergency out-of-band patches for CVE-2026-35616, a critical pre-authentication API access bypass in FortiClient EMS that enables...
- News
Hackers Exploit React2Shell in Automated Credential Theft
Threat actors are running a large-scale, automated campaign exploiting React2Shell (CVE-2025-55182) in vulnerable Next.js applications to steal...
- News
New FortiClient EMS Flaw Exploited in Attacks, Emergency
Fortinet has released an emergency weekend security update for CVE-2026-35616, a critical pre-authentication API access bypass in FortiClient EMS that is...
- Security
CVE-2016-20052: Snews CMS 1.7 Unrestricted File Upload
Snews CMS 1.7 contains a critical unrestricted file upload vulnerability allowing unauthenticated attackers to upload PHP webshells to the snews_files...
- Security
CVE-2026-5534 — SQL Injection in itsourcecode Online
A high-severity SQL injection vulnerability in itsourcecode Online Enrollment System 1.0 allows remote unauthenticated attackers to manipulate the USERID...
- Security
CVE-2026-5540 — SQL Injection in code-projects Simple
A high-severity SQL injection vulnerability in code-projects Simple Laundry System 1.0 allows remote unauthenticated attackers to manipulate the firstName...
- Security
CVE-2026-5551: SQL Injection in itsourcecode Free Hotel
A remotely exploitable SQL injection vulnerability has been disclosed in itsourcecode Free Hotel Reservation System 1.0, affecting the login page's email...
- Security
CVE-2017-20237: Hirschmann HiVision Auth Bypass Enables
A critical authentication bypass in Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 allows unauthenticated remote attackers to...
- Security
CVE-2026-25197: IDOR Flaw Lets Authenticated Users Access
A critical insecure direct object reference vulnerability allows authenticated users to pivot to any other user's profile by modifying an id parameter in...
- Security
CVE-2026-26477: DokuWiki media_upload_xhr() Denial of Service
A high-severity denial-of-service vulnerability in DokuWiki v.2025-05-14b 'Librarian' allows remote attackers to crash the application by exploiting the...
- Security
CVE-2026-28766: Gardyn Smart Garden API Exposes All User
A critical unauthenticated information disclosure vulnerability in the Gardyn smart garden platform exposes all registered user account information via a...
- Security
CVE-2026-3445: ProfilePress WordPress Plugin Allows
A high-severity authorization flaw in the ProfilePress WordPress plugin (up to v4.16.11) lets unauthenticated or low-privilege users bypass membership...
- Security
CVE-2026-35560: Amazon Athena ODBC Driver Fails Certificate
Improper certificate validation in Amazon Athena ODBC driver versions prior to 2.1.0.0 allows man-in-the-middle attackers to intercept authentication...
- Security
CVE-2026-4896: WCFM WooCommerce Plugin IDOR Allows
A high-severity Insecure Direct Object Reference vulnerability in the WCFM Frontend Manager for WooCommerce plugin (up to v6.7.25) lets authenticated...
- News
In Other News: ChatGPT Data Leak, Android Rootkit, Water
This week's security stories you may have missed: a ChatGPT conversation data leak, a new Android rootkit on Google Play, a municipal water facility taken...
- Security
CVE-2026-33615: Critical Unauthenticated SQL Injection in setinfo Endpoint
A critical unauthenticated SQL injection vulnerability (CVSS 9.1) in the setinfo endpoint allows remote attackers to corrupt data and cause denial of...
- News
Critical Vulnerability in Claude Code Emerges Days After
Adversa AI has discovered a critical vulnerability in Anthropic's Claude Code AI coding assistant, disclosed just days after Anthropic accidentally leaked...
- News
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts
A large-scale credential harvesting campaign has been observed exploiting the React2Shell vulnerability (CVE-2025-55182) as an initial infection vector,...
- News
New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE
Two newly disclosed vulnerabilities in Progress ShareFile can be chained together to enable unauthenticated remote code execution and file exfiltration,...
- News
Over 14,000 F5 BIG-IP APM Instances Still Exposed to RCE
Internet security watchdog Shadowserver has found over 14,000 BIG-IP APM instances exposed online amid ongoing attacks exploiting a critical-severity...
- News
Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026
Google has patched the fourth Chrome zero-day vulnerability actively exploited in attacks this year, a use-after-free flaw in the Dawn graphics engine...
- News
Hackers Exploit TrueConf Zero-Day to Push Malicious
Threat actors have weaponized an unpatched zero-day in TrueConf conference server software to execute arbitrary files on all connected endpoints,...
- News
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation
Google has released a Chrome security update patching 21 vulnerabilities including a high-severity use-after-free zero-day in the Dawn graphics engine...
- Security
CVE-2026-5272: Chrome GPU Heap Buffer Overflow Enables
A high-severity heap buffer overflow in Chrome's GPU component allows remote attackers to execute arbitrary code via a crafted HTML page. Affects all...
- News
CISA Orders Feds to Patch Actively Exploited Citrix Flaw by Thursday
CISA has issued a mandatory patching directive ordering all U.S. federal agencies to apply Citrix NetScaler security updates by Thursday, March 5, 2026,...
- News
Claude AI Finds Vim and Emacs RCE Bugs That Trigger on File
Anthropic's Claude AI assistant discovered remote code execution vulnerabilities in both Vim and GNU Emacs text editors using simple security research...
- News
F5 BIG-IP Vulnerability Reclassified from DoS to RCE Under
CVE-2025-53521, initially disclosed as a high-severity denial-of-service flaw in F5 BIG-IP APM, has been reclassified as a remote code execution...
- News
Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks
Hackers are actively exploiting a critical memory overread vulnerability tracked as CVE-2026-3055 in Citrix NetScaler ADC and NetScaler Gateway appliances...
- News
Critical Fortinet FortiClient EMS Flaw Now Exploited in Attacks
Threat intelligence firm Defused confirms active in-the-wild exploitation of a critical vulnerability in Fortinet's FortiClient EMS platform....
- News
Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks
F5 has reclassified a BIG-IP APM vulnerability from denial-of-service to critical remote code execution, warning that attackers are actively exploiting...
- Security
CVE-2026-32973: OpenClaw Exec Allowlist Bypass via Glob
A critical CVSS 9.8 vulnerability in OpenClaw allows attackers to bypass the exec allowlist by exploiting improper glob pattern normalization where the ?...
- Security
CVE-2026-32975: OpenClaw Zalouser Weak Authorization via Mutable Group Display Names
A critical CVSS 9.8 authorization bypass in OpenClaw's Zalouser allowlist mode matches mutable group display names instead of stable identifiers, letting...
- Security
CVE-2026-32987: OpenClaw Bootstrap Code Replay Enables
A critical CVSS 9.8 vulnerability in OpenClaw allows attackers to replay a valid bootstrap setup code multiple times before approval, escalating device...
- Security
CVE-2026-5128: Steam Trader 2.1.1 Unauthenticated Sensitive
A CVSS 10.0 critical vulnerability in steam-trader 2.1.1 exposes Steam account credentials, identity secrets, and shared secrets to unauthenticated remote...
- News
CISA: New Langflow Flaw Actively Exploited to Hijack AI
CISA has added CVE-2026-33017, a critical unauthenticated remote code execution vulnerability in the Langflow AI framework, to its Known Exploited...
- News
File Read Flaw in Smart Slider Plugin Impacts 500K
A vulnerability in the Smart Slider 3 WordPress plugin, active on more than 800,000 websites, allows subscriber-level users to read arbitrary files on the...
- Security
CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer
JAD 1.5.8e-1kali1 and prior contains a critical stack-based buffer overflow vulnerability allowing attackers to execute arbitrary code by supplying input...
- Security
CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer
TiEmu 2.08 and prior contains a critical stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by passing oversized...
- Security
CVE-2026-32922: OpenClaw Privilege Escalation via Token
A critical CVSS 9.9 privilege escalation vulnerability in OpenClaw allows operators with limited pairing scope to mint tokens with unrestricted admin...
- Security
CVE-2026-32924: OpenClaw Authorization Bypass via Feishu
A critical CVSS 9.8 authorization bypass in OpenClaw allows attackers to circumvent groupAllowFrom and requireMention protections in group chats by...
- Security
CVE-2026-5017: SQL Injection in code-projects Simple Food
A remotely exploitable SQL injection vulnerability has been disclosed in code-projects Simple Food Order System 1.0, affecting the /all-tickets.php file...
- Security
CVE-2026-5018: SQL Injection in code-projects Simple Food
A remotely exploitable SQL injection vulnerability exists in code-projects Simple Food Order System 1.0, where the Name parameter in register-router.php...
- Security
CVE-2026-5019: SQL Injection in code-projects Simple Food
A SQL injection vulnerability has been disclosed in code-projects Simple Food Order System 1.0, where the Status parameter in all-orders.php enables...
- Security
CVE-2026-5033: SQL Injection in code-projects Accounting
A remotely exploitable SQL injection vulnerability has been disclosed in code-projects Accounting System 1.0, where the cos_id parameter in...
- Security
CVE-2026-5034: SQL Injection in code-projects Accounting
A remotely exploitable SQL injection vulnerability has been disclosed in code-projects Accounting System 1.0, allowing unauthenticated attackers to...
- News
CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM
CISA has added CVE-2025-53521, a critical vulnerability in F5 BIG-IP Access Policy Manager, to its Known Exploited Vulnerabilities catalog after...
- News
Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active
Security researchers at Defused Cyber and watchTowr have detected active reconnaissance targeting CVE-2026-3055, a critical CVSS 9.3 memory overread flaw...
- Security
CVE-2025-12886: Oxygen Theme SSRF Allows Unauthenticated
A Server-Side Request Forgery vulnerability in the Oxygen Theme plugin for WordPress (all versions up to 6.0.8) enables unauthenticated attackers to make...
- Security
CVE-2026-27856: Dovecot doveadm Timing Oracle Enables
A timing oracle vulnerability in Dovecot's doveadm HTTP service allows unauthenticated remote attackers to recover configured credentials through...
- News
PolyShell Attacks Target 56% of All Vulnerable Magento
Mass exploitation is underway against Magento 2 and Adobe Commerce installations using the 'PolyShell' polyglot file upload vulnerability, with attackers...
- News
PTC Warns of Imminent Threat from Critical Windchill
PTC is warning customers of an imminent exploit threat against a critical deserialization vulnerability in Windchill and FlexPLM — CVE-2026-4681, CVSS...
- News
CISA Adds Apple DarkSword iOS Exploits, Craft CMS, and Laravel Livewire Flaws to KEV Catalog
CISA orders federal agencies to patch five actively exploited vulnerabilities by April 3, including three Apple flaws linked to the DarkSword iOS exploit...
- News
Trivy Vulnerability Scanner Breached to Push Infostealer
The Trivy open-source vulnerability scanner was compromised in a supply chain attack by the threat group TeamPCP, which hijacked 75 release tags and...
- News
Interlock Ransomware Exploited Cisco FMC Zero-Day for 36
CVE-2026-20131, a maximum-severity CVSS 10.0 insecure deserialization flaw in Cisco Firepower Management Center, was exploited by Interlock ransomware as...
- News
Critical Langflow RCE Flaw Exploited Within 20 Hours of Disclosure
CVE-2026-33017, a CVSS 9.3 unauthenticated remote code execution vulnerability in the Langflow AI platform, was weaponized by threat actors within 20...
- News
Marquis Fintech Breach Exposes 672,000 Banking Customers
Plano-based fintech vendor Marquis disclosed that a ransomware attack exploiting a SonicWall firewall vulnerability compromised Social Security numbers,...
- Security
CVE-2025-43510: Apple Multiple Products Improper Locking
Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability allowing a malicious app to cause unexpected changes in...
- Security
CVE-2025-54068: Laravel Livewire Code Injection
A critical code injection vulnerability in Laravel Livewire v3 allows unauthenticated remote attackers to execute arbitrary commands. Over 130,000...
- Security
CVE-2026-22172: OpenClaw Critical Authorization Bypass via WebSocket Scope Elevation
A critical CVSS 9.9 authorization bypass in OpenClaw allows authenticated users to self-declare elevated scopes over WebSocket connections without...
- News
Oracle Pushes Emergency Fix for Critical Identity Manager
Oracle has released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability in Oracle Identity Manager and...
- Security
CVE-2025-32432: Craft CMS Code Injection Vulnerability
A critical code injection vulnerability in Craft CMS allows unauthenticated remote attackers to execute arbitrary code on affected servers. Added to...
- News
CISA Adds Zimbra XSS and SharePoint RCE to KEV; Cisco FMC
CISA added actively exploited Zimbra Collaboration Suite and Microsoft SharePoint vulnerabilities to its Known Exploited Vulnerabilities catalog on March...
- News
Critical Unpatched GNU Telnetd Flaw (CVE-2026-32746)
Researchers have disclosed a critical unauthenticated remote code execution vulnerability in the GNU InetUtils telnet daemon (telnetd). CVE-2026-32746...
- News
Interlock Ransomware Has Been Exploiting Cisco FMC Zero-Day
The Interlock ransomware gang has been actively exploiting a CVSS 10.0 insecure deserialization flaw in Cisco Secure Firewall Management Center since late...
- Security
CVE-2026-25534: Spinnaker SSRF via URL Validation Bypass
A critical SSRF vulnerability (CVSS 9.1) in Spinnaker's clouddriver and orca components bypasses the previous CVE-2025-61916 URL validation patch through...
- Security
CVE-2026-25769: Wazuh Critical RCE via Insecure
A critical remote code execution vulnerability (CVSS 9.1) in Wazuh versions 4.0.0–4.14.2 allows an attacker with access to a worker node to achieve root...
- Security
CVE-2026-25770: Wazuh Privilege Escalation to Root via Cluster Protocol File Write
A critical privilege escalation vulnerability (CVSS 9.1) in Wazuh versions 3.9.0–4.14.2 allows authenticated cluster nodes to overwrite the manager...
- Security
CVE-2026-3564: ConnectWise ScreenConnect Auth Bypass via Server Cryptographic Material
A critical authentication bypass vulnerability (CVSS 9.0) in ConnectWise ScreenConnect versions prior to 26.1 allows an actor with access to server-level...
- Security
CVE-2015-20118: Stored XSS in RealtyScript 4.0.2 Admin
A stored cross-site scripting vulnerability in RealtyScript 4.0.2 allows attackers to inject malicious JavaScript via the location_name parameter in the...
- Security
CVE-2025-62319: Critical SQL Injection in HCL Unica (CVSS
A critical unauthenticated Boolean-based SQL injection vulnerability (CVSS 9.8) has been disclosed in HCL Unica versions 25.1.1 and below, allowing remote...
- News
CISA Adds Wing FTP Server Flaw to KEV as RCE Chain Exploits
CISA added CVE-2025-47813 to its Known Exploited Vulnerabilities catalog on March 16, warning that the medium-severity path disclosure flaw is being...
- Security
CVE-2015-20115: RealtyScript 4.0.2 Stored XSS via File
CVE-2015-20115 is a stored cross-site scripting vulnerability in RealtyScript 4.0.2 that allows authenticated attackers to upload malicious script files...
- Security
CVE-2016-20024: ZKTeco ZKTime.Net Insecure File Permissions
ZKTeco ZKTime.Net 3.0.1.6 ships with world-writable directory permissions on its installation folder, allowing any local unprivileged user to replace...
- Security
CVE-2016-20026: ZKTeco ZKBioSecurity 3.0 Hardcoded Tomcat
ZKTeco ZKBioSecurity 3.0 ships a bundled Apache Tomcat server with hardcoded credentials stored in tomcat-users.xml, granting unauthenticated attackers...
- Security
CVE-2016-20030: ZKTeco ZKBioSecurity 3.0 Username
ZKTeco ZKBioSecurity 3.0 allows unauthenticated attackers to enumerate valid usernames by submitting partial character strings to the...
- Security
CVE-2025-47813: Wing FTP Server Path Disclosure Enables RCE
CISA has added CVE-2025-47813, a medium-severity information disclosure flaw in Wing FTP Server, to its KEV catalog after confirming active exploitation...
- News
CISA Flags Actively Exploited n8n RCE Bug as 24,700
CISA added CVE-2025-68613 — a CVSS 9.9 remote code execution flaw in n8n's workflow expression evaluator — to its Known Exploited Vulnerabilities catalog...
- News
CISA Orders Federal Agencies to Patch n8n RCE Flaw
CISA mandated all federal civilian agencies patch CVE-2025-68613, a CVSS 9.9 remote code execution flaw in the n8n workflow automation platform, after...
- Security
CVE-2026-3038: FreeBSD Kernel Stack Buffer Overflow in Routing Sockets
A high-severity stack buffer overflow vulnerability in FreeBSD's routing socket subsystem allows an unprivileged local attacker to trigger a kernel panic,...
- Security
CVE-2026-3730: SQL Injection in itsourcecode Free Hotel
A remotely exploitable SQL injection vulnerability has been disclosed in itsourcecode Free Hotel Reservation System 1.0, affecting the amenities admin...
- Security
CVE-2026-3734: Improper Authorization in SourceCodester
A remotely exploitable improper authorization vulnerability has been disclosed in SourceCodester Client Database Management System 1.0, allowing...
- Security
CVE-2026-3740: SQL Injection in itsourcecode University
A high-severity SQL injection vulnerability has been disclosed in itsourcecode University Management System 1.0, allowing remote attackers to execute...
- Security
CVE-2026-3746: SQL Injection in SourceCodester Simple
A remotely exploitable SQL injection vulnerability has been disclosed in SourceCodester Simple Responsive Tourism Website 1.0, allowing attackers to...
- Security
CVE-2026-29067: ZITADEL Password Reset Poisoned by Host Header Injection
A high-severity host header injection vulnerability in ZITADEL's login V2 password reset flow allows attackers to redirect reset links to...
- Security
CVE-2026-29192: ZITADEL Stored XSS via Default Redirect URI
A stored cross-site scripting vulnerability in ZITADEL's login V2 interface allows organization administrators to inject malicious JavaScript via a...
- Security
CVE-2018-25165: SQL Injection Disclosed in Galaxy Forces MMORPG
A SQL injection vulnerability in Galaxy Forces MMORPG version 0.5.8 has been formally catalogued by NVD, enabling authenticated attackers to extract...
- Security
CVE-2018-25169: Denial of Service Vulnerability Catalogued
A denial of service vulnerability in AMPPS 2.7, a local web server stack for developers, has been formally assigned CVE-2018-25169 with a CVSS score of...
- Security
CVE-2026-3589: WooCommerce CSRF Flaw Allows Unauthenticated
A cross-site request forgery vulnerability in WooCommerce versions 5.4.0 through 10.5.2 allows attackers to abuse the Store API's batch endpoint to...
- Security
CISA Issues Emergency Directive as Cisco SD-WAN Zero-Day
A maximum-severity authentication bypass in Cisco Catalyst SD-WAN (CVE-2026-20127, CVSS 10.0) has been actively exploited by threat actor UAT-8616 since...
- Security
CVE-2026-28775: Unauthenticated Root RCE in IDC SFX
A critical unauthenticated RCE vulnerability in International Datacasting Corporation's SFX Series satellite receivers allows attackers to execute...
- Security
Mail2Shell: Zero-Click RCE in FreeScout Helpdesk
A maximum-severity zero-click vulnerability dubbed Mail2Shell allows unauthenticated attackers to compromise FreeScout mail servers by simply sending a...
- Security
CISA Adds Actively Exploited VMware Aria Operations RCE
CISA has added CVE-2026-22719, a high-severity command injection vulnerability in VMware Aria Operations allowing unauthenticated remote code execution,...
- News
Android March 2026 Security Update Patches 129
Google's March 2026 Android security bulletin addresses 129 vulnerabilities, including CVE-2026-21385 — an actively exploited zero-day in a Qualcomm...
- Security
Microsoft February 2026 Patch Tuesday Fixes Six Actively
Microsoft's February 2026 Patch Tuesday addresses roughly 60 vulnerabilities including six actively exploited zero-days across Windows, Office, and Azure...
- News
Tirith: New Open-Source Tool Blocks Homoglyph Attacks
A new cross-platform tool called Tirith hooks into terminal shells to detect and block Unicode homoglyph attacks, pipe-to-shell exploits, and supply chain...
- News
DKnife: China-Linked AitM Framework Hijacks Router Traffic
Cisco Talos uncovers a seven-component Linux framework called DKnife that compromises routers to intercept credentials, replace downloads with trojans,...