Critical FortiSIEM Flaw with Public Exploit Enables Remote Code Execution
A critical unauthenticated remote code execution vulnerability affecting Fortinet FortiSIEM (CVE-2026-106173) now has a public proof-of-concept exploit available.
Tag
#Vulnerability
80 results in the archive.
Hackers Exploit Plex2Shell Flaws to Deploy Crypto Miners and Proxy Backdoor
A chain of four vulnerabilities in Plex Media Server named Plex2Shell is actively exploited to install cryptocurrency miners and reverse proxy backdoors, following a public proof-of-concept release.
Critical BlockStrap Flaw Allows Code Execution on Magento Servers
A critical vulnerability (CVE-2026-103849) in BlockStrap impacts Magento and Adobe Commerce platforms, enabling potential arbitrary PHP code execution on e-commerce servers.
BeyondTrust patches zero-day exploited since August
BeyondTrust has released a critical patch for a zero-day vulnerability in its Remote Support software actively exploited since August, preventing potential security breaches.
Critical CVSS 10 Flaw in SAP Cloud SDK for Python Exposes OAuth2 Credentials
SAP disclosed a critical vulnerability in its Cloud SDK for Python that allows attackers to steal OAuth2 client credentials from multi-tenant applications on the SAP Business Technology Platform.
Critical Bricksforge WordPress Flaw Enables Unauthenticated RCE Exploited
A critical unauthenticated remote code execution vulnerability in the Bricksforge WordPress plugin is actively exploited, affecting vulnerable WordPress sites.
Max severity SonicWall SMA1000 flaw now exploited in attacks
A critical vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) patched recently is now being actively exploited in the wild against unpatched devices.
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco disclosed five critical vulnerabilities in NX-OS enabling attackers to gain root-level control over Nexus switches, threatening data center security.
Critical File-Access Flaw Found in Atlassian Jira and Confluence
Atlassian disclosed a critical vulnerability, CVE-2026-21589, allowing arbitrary file access in self-hosted Data Center products like Jira, Confluence, and Bitbucket.
Critical Dell System Update Vulnerability Allows Root Privilege Escalation
Dell released a critical patch for a privilege escalation vulnerability in its System Update CLI tool that could let attackers gain root access.
CISA Adds New Fortinet FortiMail Vulnerability to Exploited Catalog
CISA has added CVE-2026-104286, a path traversal vulnerability in Fortinet FortiMail, to its Known Exploited Vulnerabilities Catalog due to active exploitation risk.
Critical Vulnerabilities Found in Armatura One Affecting Access Control Systems
Critical vulnerabilities in Armatura LLC's Armatura One expose access control systems to unauthorized access and arbitrary code execution risks.
CISA Warns of Global Exploitation of Two Critical Citrix NetScaler Flaws
CISA has added two critical Citrix NetScaler ADC and Gateway vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of active global exploitation impacting enterprise systems.
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC and Gateway
CISA warns of eight vulnerabilities in Citrix NetScaler ADC and Gateway, including two critical zero-days actively exploited allowing remote code execution.
Elementor WordPress CSRF Flaw Allows Admin Account Creation
A CSRF flaw in Elementor Website Builder versions 4.3.0 and 4.3.1 can let an attacker induce a logged-in WordPress administrator to create an attacker-controlled admin account. Version 4.3.2 fixes the issue.
MikroTrick Chain Lets Attackers Control MikroTik Routers Without Credentials
Two linked vulnerabilities in MikroTik RouterOS allow attackers to gain full administrative access without needing passwords or SSH keys, identified by CERT Polska as CVE-2026-67279 and CVE-2026-86060 in the MikroTrick exploit chain.
Critical Bifrost AI Gateway Flaw Allows Credentialless Command Execution
A critical vulnerability in the open-source Bifrost AI gateway allows attackers to execute arbitrary commands without authentication, affecting versions before 2.1.0.
WordPress Patches Critical Flaw Allowing Remote Code Execution
WordPress released a patch for a critical vulnerability that allowed unauthenticated attackers to load PHP files externally, risking remote code execution on affected servers.
CISA Adds Zyxel Switch Buffer Overflow to Known Exploited Vulnerabilities Catalog
CISA added CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 switches, to its Known Exploited Vulnerabilities Catalog after evidence of active exploitation.
CISA Warns of Active Exploitation of Three Linux Kernel Flaws
CISA has issued an alert about active exploitation of three Linux kernel vulnerabilities, including one critical severity flaw affecting Linux systems.
Critical Pre-Auth RCE Found and Exploited in Orkes Conductor Platform
A critical unauthenticated remote code execution vulnerability (CVE-2026-58138) in Orkes Conductor affecting versions prior to 3.30.2 is actively exploited and presents severe security risks.
Critical Check Point Flaw Allows Root Privilege Code Execution
Check Point Software disclosed and patched a critical vulnerability enabling attackers to execute code as root on management systems, risking full enterprise system compromise.
Critical RCE Flaw in Unbound DNSSEC Validator Fixed in 1.26.1
A critical heap overflow vulnerability in Unbound DNSSEC validator before version 1.26.1 allows remote code execution via malicious DNS zones.
Critical Issabel Framework Flaw Enables Unauthenticated OS Command Execution
A critical vulnerability in the Issabel Framework allows unauthenticated remote OS command execution, actively exploited and posing a severe security risk.
CISA Alerts on Ransomware Exploiting Critical VMware vCenter Flaw
CISA warns that ransomware gangs have begun exploiting a critical remote code execution vulnerability in VMware vCenter that was patched in July.
Critical Vulnerabilities Discovered in mySCADA myPRO Manager
Two critical vulnerabilities in mySCADA myPRO Manager allow unauthenticated attackers to access privileged management functions and send arbitrary SMS via connected GSM modems, affecting versions through 2.1.
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Globally
The state-sponsored threat actor Red Heron exploited a remote code execution vulnerability in Gitea to compromise 13 organizations across six countries in a rapid, targeted campaign.
GitLab CVSS 10 File-Read Flaw Faces In-the-Wild Probes
GitLab issued patches for a critical CVSS 10.0 path traversal flaw in its repository commits API that allows unauthenticated file reads and is being actively probed in the wild.
Cisco confirms active exploitation of critical FMC authentication bypass flaw
Cisco has confirmed active exploitation of a critical authentication bypass vulnerability (CVE-2026-20079) in its Secure Firewall Management Center software, risking enterprise defenses.
Critical MikroTik SSH Bypass Exploited - Patch Immediately
MikroTik released a patch for an SSH authentication bypass vulnerability currently exploited to create unauthorized accounts on devices.
Attackers Breach JetBrains Cadence via Unpatched TeamCity
JetBrains suffered a breach after attackers exploited an unpatched TeamCity vulnerability to access Cadence and extract AWS credentials.
Critical Citrix NetScaler Auth Bypass Flaw Exploited in Attacks
Attackers are actively exploiting a critical authentication bypass vulnerability in Citrix NetScaler, significantly impacting enterprise security.
Critical Elementor Pro Flaw Enables Takeover of WordPress Sites
A critical vulnerability (CVE-2026-32475) in Elementor Pro is actively exploited to deliver webshells and execute commands on WordPress servers.
Critical JFrog Artifactory Flaw Exploited Days After Patch
Attackers are actively exploiting CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, shortly after its public disclosure and patch release.
GiveWP WordPress Plugin Flaw Lets Hackers Execute Server Commands
A critical vulnerability in the GiveWP donation plugin for WordPress allows unauthenticated attackers to execute arbitrary commands on the hosting server.
Critical cPanel Flaw Lets Single Hosting Customer Gain Root Access
A critical vulnerability in cPanel & WHM's domain parking and addon domain features enables a hosting customer to gain root access, posing a significant threat to server security.
PaperCut issues second emergency patch for exploited NG and MF flaws
PaperCut released a second emergency patch addressing two actively exploited vulnerabilities in its NG and MF print management software after initial mitigations were bypassed.
Three CVSS 10.0 ServiceNow Flaws Enable Code Execution and SQL Injection
ServiceNow fixed four security flaws in its AI Platform, including three critical CVSS 10.0 vulnerabilities that allow unauthenticated code execution and SQL injection.
Critical Vulnerabilities Found in Xiiaozet LK100W Devices
Multiple critical vulnerabilities in Xiiaozet LK100W devices could allow attackers to remotely gain full control, with version 2.1.240 addressing these risks.
PaperCut NG and MF Zero-Day Flaw Actively Exploited in Attacks
A critical zero-day vulnerability in all versions of PaperCut NG and MF print management software is actively exploited in attacks, affecting organizations using these products.
Critical Vulnerabilities Found in Ebyte NE2-D11 Firmware
Multiple critical vulnerabilities in Ebyte NE2-D11 devices allow unauthorized administrative access, data exposure, and operational disruption, affecting critical infrastructure controls.
Hackers Breached 270+ Zimbra Servers via Critical RCE Vulnerability
Over 270 Zimbra Collaboration Suite servers have been breached through exploitation of a critical remote code execution vulnerability, exposing organizations to significant security risks.
CISA Adds Oracle HTTP Server Vulnerability to Known Exploited Catalog
CISA has added CVE-2026-21962, an Oracle HTTP Server and WebLogic Server Proxy Plug-in vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation.
Critical Keycloak Password Reset Flaw Could Let Attackers Hijack Any Account
A critical vulnerability rated 9.1 CVSS in Keycloak allows unauthenticated attackers to hijack user accounts by forcing password resets, with patches released by Red Hat and the Keycloak project.
GitLab CVE-2026-19478 Exploited Days After Disclosure
A critical code injection vulnerability in GitLab, CVE-2026-19478, is actively exploited shortly after disclosure, enabling unauthenticated attackers to modify or delete certain publicly accessible projects.
Microsoft patches critical Entra ID flaw exploited in active attacks
Microsoft released a patch for a critical vulnerability in Entra ID that is actively exploited in targeted attacks, affecting identity and access management security.
CISA Warns of Active Exploitation of Critical MLflow Vulnerability
CISA warns that threat actors are actively exploiting a critical vulnerability in the MLflow AI engineering platform, posing risks to federal agencies and beyond.
Critical NetScaler Flaw Can Bypass Authentication on Gateway Servers
Citrix has patched critical authentication bypass vulnerabilities affecting NetScaler ADC and Gateway, impacting specific FIPS and NDcPP builds used on gateway and AAA servers.
CISA: Ransomware Gangs Exploiting Windows Task Host Flaw
CISA confirms ransomware groups are actively exploiting a high-severity Windows Task Host vulnerability, posing increased risk to enterprise environments.
Critical Out-of-Bounds Read Vulnerability in Siemens Parasolid
A high-severity out-of-bounds read vulnerability in Siemens Parasolid parsing X_T files allows potential arbitrary code execution, affecting versions prior to V38.0.235 and V38.1.230.
AI-Assisted Exploit Enables Unauthenticated RCE on SharePoint Servers
A critical SharePoint vulnerability (CVE-2026-55040) enables unauthenticated remote code execution, facilitated by AI, affecting several SharePoint Server versions.
Cisco Patches 12 Critical SD-WAN and IOS XE Vulnerabilities
Cisco released patches for 12 critical vulnerabilities in Catalyst SD-WAN and IOS XE software impacting devices in all configurations.
Veeam, Terraform MCP, and Django Patch Critical Vulnerabilities Including CVSS 10.0 Bug
HashiCorp, Veeam, and the Django Software Foundation released patches for 11 vulnerabilities, including a critical CVSS 10.0 cross-tenant bug affecting Terraform MCP Server, Veeam Service Provider Console, and Django software.
Critical cPanel Flaw Lets Hosting Customers Run SQL as Database Root
A critical vulnerability in cPanel (CVE-2026-58048) allowed authenticated hosting customers to execute SQL commands with root database privileges, risking full database control.
Critical Integrity Flaw in Thermo Fisher Genetic Analyzers Could Alter DNA Data
A high-severity vulnerability in Thermo Fisher Applied Biosystems Genetic Analyzers allows modification of DNA data output files, risking inaccurate test results in healthcare settings.
Adobe Campaign Classic CVSS 10.0 Flaw Enables Code Execution Without User Action
Adobe Campaign Classic includes a critical CVSS 10.0 vulnerability (CVE-2026-48449) that allows arbitrary code execution without user interaction.
Azure Cosmos DB Flaw Exposed Platform-Wide Access Key
A critical vulnerability in Azure Cosmos DB enabled attackers to escape the Gremlin query sandbox and gain full read/write access to multiple customer databases.
JetBrains warns of critical TeamCity remote code execution flaw
JetBrains disclosed a critical authentication bypass vulnerability in TeamCity On-Premises that enables remote code execution, posing significant risk to enterprise environments.
Critical Ruby on Rails Flaw Lets Attackers Read Server Files via Image Uploads
A critical Active Storage vulnerability in Ruby on Rails allows unauthenticated attackers to read arbitrary server files through malicious image uploads, risking exposure of sensitive data.
Critical Ruflo MCP Flaw Enables Remote Code Execution and AI Memory Poisoning
A critical vulnerability in the Ruflo open-source agent platform allows unauthenticated remote code execution and poisoning of AI memory, posing significant risks to AI model operations.
Three Critical VMware Flaws Enable Auth Bypass and VM Escape
Broadcom published updates for critical VMware vulnerabilities in ESX, vCenter, Workstation, and Fusion enabling authentication bypass and VM escape with high severity.
vBulletin fixes critical pre-auth RCE flaw with public exploit
A critical pre-authentication remote code execution vulnerability in vBulletin forum software has been patched following the public release of an exploit, enabling unauthenticated attackers to execute arbitrary PHP code.
Fastjson 1.x RCE Vulnerability Actively Targeted, No Patch Available
Attackers are exploiting a critical remote code execution vulnerability in Fastjson 1.x used in Spring Boot applications, enabling unauthenticated code execution with Java process privileges and no patch currently available.
Critical Bing Image Flaw Allows SVGs to Execute Commands as SYSTEM
A crafted SVG submitted to Bing image search can execute commands as NT AUTHORITY\SYSTEM on Microsoft’s production servers, impacting multiple hosts with critical security implications.
Critical Privilege Escalation Vulnerabilities Found in Weintek cMT3092X HMI
Multiple high-severity vulnerabilities in Weintek cMT3092X HMI may allow attackers to escalate privileges and steal credentials, impacting critical manufacturing environments.
CISA Urges Immediate Patching of Exploited Fortinet FortiSandbox Flaws
CISA has directed federal agencies to urgently patch two actively exploited vulnerabilities in Fortinet FortiSandbox, highlighting critical risks to government and enterprise environments.
Critical wp2shell WordPress Flaw Allows Unauthenticated Code Execution
A critical vulnerability in WordPress core enables unauthenticated attackers to execute code on default installations, prompting urgent patch releases.
CISA Warns to Patch Actively Exploited SharePoint Vulnerabilities
CISA issued a warning about three actively exploited vulnerabilities in Internet-exposed on-premises SharePoint Server instances that allow remote compromise.
Zoom warns of critical account takeover vulnerability
Zoom has disclosed a critical vulnerability in its Windows desktop client and SDK that enables unauthenticated attackers to hijack user accounts, posing a significant security risk.
SAP Patches Critical CVSS 9.9 Flaw in NetWeaver ABAP
SAP released updates fixing a critical CVSS 9.9 out-of-bounds write vulnerability in NetWeaver ABAP that may allow authenticated attackers to corrupt memory and manipulate data.
SonicWall alerts on critical SMA1000 zero-day flaws in active attacks
SonicWall disclosed two critical zero-day vulnerabilities in SMA1000 devices being exploited in active attacks, highlighting urgent risk to enterprise network security.
CISA warns of active RCE flaws in Joomla iCagenda and Balbooa Forms extensions
CISA warns that remote code execution vulnerabilities are actively exploited in Joomla iCagenda and Balbooa Forms extensions through arbitrary file uploads, risking full compromise of affected sites.
Critical Authenticated File Write Vulnerability in OpenPLC v3 Affects Industrial Systems
OpenPLC v3 contains a critical authenticated arbitrary file write vulnerability that can lead to native code execution through compiling malicious files. This affects critical infrastructure sectors worldwide and requires urgent mitigation.
Study Finds Traffic Leaks and Security Flaws in 281 Free Android VPN Apps
Researchers tested 281 popular free Android VPN apps and discovered many leak user traffic, transmit unencrypted data, and include tracking. These apps, collectively installed over 2.4 billion times, fail to meet basic privacy and security standards.
Ubiquiti Patches Critical UniFi Flaws in Multiple Key Products
Ubiquiti released updates to fix critical vulnerabilities in UniFi Connect, Talk, Access, Protect, and OS. These flaws could allow privilege escalation and arbitrary command execution.
Threat Actors Probe Critical Gitea Docker Flaw CVE-2026-20896
Threat actors are actively attempting to exploit a critical vulnerability in Gitea Docker images less than two weeks after it was patched. The flaw allows unauthenticated clients to escalate privileges by abusing the 'X-WEBAUTH-USER' header.
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host
A critical use-after-free flaw in Linux's KVM hypervisor allows guest VMs on Intel and AMD systems to corrupt host kernel memory, potentially escaping the virtual environment. The vulnerability, known as Januscape (CVE-2026-53359), includes a public PoC that crashes hosts with a more impactful exploit reportedly in development.
Max severity Adobe ColdFusion flaw actively exploited in attacks
A critical Adobe ColdFusion vulnerability, CVE-2026-48282, is now being actively exploited in cyberattacks, according to KEVIntel. This flaw demands immediate attention due to its maximum severity rating.
Bad Epoll Linux Kernel Flaw Lets Unprivileged Users Gain Root Access
A new Linux kernel vulnerability, Bad Epoll (CVE-2026-46242), allows unprivileged users to escalate to root, impacting Linux desktops, servers, and Android devices. A patch has already been released.
Unpatched Flaws Found in FatFs Filesystem Affecting Millions of Devices
Security firm runZero disclosed seven vulnerabilities in FatFs, a widely used filesystem library in embedded devices including security cameras and drones. These flaws pose a risk due to FatFs's ubiquity in consumer and industrial firmware.