Vulnerability

LibreOffice, OpenOffice Flaws Run Code Without Macro Warning

LibreOffice, OpenOffice Flaws Run Code Without Macro Warning

Oct 6, 2026 · 1 min read

WordPress Click2Shell Flaw: CSRF Chain Enables PHP Code Execution

WordPress Click2Shell Flaw: CSRF Chain Enables PHP Code Execution

Sep 22, 2026 · 1 min read

SolarWinds Patches Hard-Coded Key Flaw in Access Rights Manager

SolarWinds Patches Hard-Coded Key Flaw in Access Rights Manager

Sep 19, 2026 · 1 min read

Critical Check Point Management Server Flaw Allows Root Code Execution

Critical Check Point Management Server Flaw Allows Root Code Execution

Sep 18, 2026 · 1 min read

Microsoft Patches CVSS 10.0 Flaw in Azure AI Foundry

Microsoft Patches CVSS 10.0 Flaw in Azure AI Foundry

Sep 18, 2026 · 1 min read

Critical Unbound DNS Flaw Enables RCE; Upgrade to 1.26.1 Now

Critical Unbound DNS Flaw Enables RCE; Upgrade to 1.26.1 Now

Sep 17, 2026 · 1 min read

Hackers Mass-Scan Exposed Vite Dev Servers to Steal Cloud Credentials

Hackers Mass-Scan Exposed Vite Dev Servers to Steal Cloud Credentials

Sep 14, 2026 · 1 min read

Telegram Desktop Bug Let Bots Inject Hidden Scripts into Chat Exports

Telegram Desktop Bug Let Bots Inject Hidden Scripts into Chat Exports

Sep 14, 2026 · 2 min read

Japan's Digital Agency VPN Breach Exposed 246,000 Government Records

Japan's Digital Agency VPN Breach Exposed 246,000 Government Records

Sep 14, 2026 · 1 min read

Attackers Chain Two Artifactory Flaws to Deploy Rust Backdoor

Attackers Chain Two Artifactory Flaws to Deploy Rust Backdoor

Sep 12, 2026 · 1 min read

GitLab Patches Critical Path Traversal Flaw Under Active Probe

GitLab Patches Critical Path Traversal Flaw Under Active Probe

Sep 11, 2026 · 1 min read

Check Point Patches Two Critical VPN Certificate Flaws, CVSS 9.8

Check Point Patches Two Critical VPN Certificate Flaws, CVSS 9.8

Sep 10, 2026 · 2 min read

WeChat Zero-Click Worm Can Take Over Accounts via Calls

WeChat Zero-Click Worm Can Take Over Accounts via Calls

Sep 8, 2026 · 1 min read

ConnectWise Warns of Unpatched ScreenConnect File Transfer Flaw

ConnectWise Warns of Unpatched ScreenConnect File Transfer Flaw

Sep 7, 2026 · 1 min read

Citrix NetScaler Auth Bypass CVE-2026-19490 Actively Exploited

Citrix NetScaler Auth Bypass CVE-2026-19490 Actively Exploited

Sep 4, 2026 · 1 min read

Plex Urges Immediate Update to Fix Multiple Security Flaws

Plex Urges Immediate Update to Fix Multiple Security Flaws

Sep 3, 2026 · 1 min read

New SonicWall SMA1000 Zero-Days Actively Exploited, Patch Now

New SonicWall SMA1000 Zero-Days Actively Exploited, Patch Now

Sep 2, 2026 · 1 min read

Critical JFrog Artifactory Flaw Exploited One Day After Patch

Critical JFrog Artifactory Flaw Exploited One Day After Patch

Sep 2, 2026 · 1 min read

GiveWP Plugin Flaw Lets Hackers Run Commands on WordPress Sites

GiveWP Plugin Flaw Lets Hackers Run Commands on WordPress Sites

Aug 29, 2026 · 1 min read

PaperCut Issues Second Emergency Patch After Bypasses Found

PaperCut Issues Second Emergency Patch After Bypasses Found

Aug 28, 2026 · 1 min read

Cosmos EVM Flaw Exploited, Three Blockchains Forced to Halt

Cosmos EVM Flaw Exploited, Three Blockchains Forced to Halt

Aug 28, 2026 · 1 min read

ServiceNow Patches Three CVSS 10.0 Flaws Enabling Unauthenticated RCE

ServiceNow Patches Three CVSS 10.0 Flaws Enabling Unauthenticated RCE

Aug 28, 2026 · 1 min read

PaperCut Print Software Hit by Actively Exploited Zero-Day

PaperCut Print Software Hit by Actively Exploited Zero-Day

Aug 27, 2026 · 1 min read

Critical Avada Theme Flaw Lets Hackers Hijack WordPress Sites

Critical Avada Theme Flaw Lets Hackers Hijack WordPress Sites

Aug 26, 2026 · 1 min read

Ubiquiti Patches Three Max-Severity UniFi Vulnerabilities

Ubiquiti Patches Three Max-Severity UniFi Vulnerabilities

Aug 26, 2026 · 1 min read

Oracle WebLogic Flaw Actively Exploited, Patch Before Aug 27

Oracle WebLogic Flaw Actively Exploited, Patch Before Aug 27

Aug 26, 2026 · 1 min read

Critical Keycloak flaw lets attackers hijack any account

Critical Keycloak flaw lets attackers hijack any account

Aug 24, 2026 · 1 min read

CISA demands 3-day fix for exploited Zimbra RCE flaw

CISA demands 3-day fix for exploited Zimbra RCE flaw

Aug 24, 2026 · 1 min read

Cisco Patches Nine Critical Flaws, Five Rated CVSS 10.0

Cisco Patches Nine Critical Flaws, Five Rated CVSS 10.0

Aug 21, 2026 · 1 min read

Microsoft Patches Max-Severity Entra ID Flaw Exploited in the Wild

Microsoft Patches Max-Severity Entra ID Flaw Exploited in the Wild

Aug 21, 2026 · 0 min read

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials

Aug 18, 2026 · 1 min read

GitLab Patches Critical Flaw That Lets Anyone Delete Projects

GitLab Patches Critical Flaw That Lets Anyone Delete Projects

Aug 17, 2026 · 1 min read

macOS Screen Sharing Bug Exploited to Plant Crypto Miner

macOS Screen Sharing Bug Exploited to Plant Crypto Miner

Aug 14, 2026 · 1 min read

SAP Commerce Cloud Max-Severity RCE Flaw Exploited in the Wild

SAP Commerce Cloud Max-Severity RCE Flaw Exploited in the Wild

Aug 14, 2026 · 1 min read

CISA Confirms Ransomware Gangs Are Exploiting SharePoint Flaw CVE-2026-45659

CISA Confirms Ransomware Gangs Are Exploiting SharePoint Flaw CVE-2026-45659

Aug 12, 2026 · 1 min read

Microsoft Patches 400 Flaws Including Actively Exploited Zero-Day

Microsoft Patches 400 Flaws Including Actively Exploited Zero-Day

Aug 11, 2026 · 1 min read

18-Year-Old Linux Flaw Lets Attackers Gain Root and Escape Containers

18-Year-Old Linux Flaw Lets Attackers Gain Root and Escape Containers

Aug 8, 2026 · 1 min read

WordPress Patches Login XSS That Can Lead to Full Site Takeover

WordPress Patches Login XSS That Can Lead to Full Site Takeover

Aug 7, 2026 · 1 min read

CryptoJS Flaw Behind $5.7 Million Crypto Wallet Drains

CryptoJS Flaw Behind $5.7 Million Crypto Wallet Drains

Aug 6, 2026 · 1 min read

Critical Gitea flaw lets anyone read server files without logging in

Critical Gitea flaw lets anyone read server files without logging in

Aug 5, 2026 · 1 min read

TP-Link patches 15 flaws letting hackers breach Omada networks

TP-Link patches 15 flaws letting hackers breach Omada networks

Aug 5, 2026 · 1 min read

Switzerland's Federal IT Office Hacked via SharePoint Flaws

Switzerland's Federal IT Office Hacked via SharePoint Flaws

Aug 4, 2026 · 1 min read

Critical cPanel Flaw Lets Hosting Customers Run SQL as Root

Critical cPanel Flaw Lets Hosting Customers Run SQL as Root

Aug 4, 2026 · 1 min read

INC Ransomware Gang Is Actively Exploiting Patched SonicWall VPN Flaws

INC Ransomware Gang Is Actively Exploiting Patched SonicWall VPN Flaws

Aug 4, 2026 · 1 min read

Thermo Fisher Patches Flaw That Made DNA Tampering Undetectable

Thermo Fisher Patches Flaw That Made DNA Tampering Undetectable

Aug 3, 2026 · 2 min read

Adobe Patches CVSS 10.0 Bug in Campaign Classic Platform

Adobe Patches CVSS 10.0 Bug in Campaign Classic Platform

Aug 1, 2026 · 1 min read

Researchers Find 84 Security Flaws in 4G and 5G Network Cores

Researchers Find 84 Security Flaws in 4G and 5G Network Cores

Aug 1, 2026 · 1 min read

Three Chrome Releases Patched 1,442 Flaws — More Than 23 Prior Updates

Three Chrome Releases Patched 1,442 Flaws — More Than 23 Prior Updates

Jul 31, 2026 · 1 min read

VMware Patches Five Flaws Including VM Escape and Auth Bypass

VMware Patches Five Flaws Including VM Escape and Auth Bypass

Jul 31, 2026 · 1 min read

Critical JetBrains TeamCity Flaw Enables Remote Code Execution

Critical JetBrains TeamCity Flaw Enables Remote Code Execution

Jul 31, 2026 · 1 min read

Azure Cosmos DB Flaw Exposed Platform-Wide Key for All Databases

Azure Cosmos DB Flaw Exposed Platform-Wide Key for All Databases

Jul 31, 2026 · 1 min read

Critical Rails Bug CVE-2026-66066 Lets Attackers Read Server Files via Image Upload

Critical Rails Bug CVE-2026-66066 Lets Attackers Read Server Files via Image Upload

Jul 31, 2026 · 1 min read

Single Webpage Visit Can Exploit Firefox and Tor Browser

Single Webpage Visit Can Exploit Firefox and Tor Browser

Jul 29, 2026 · 1 min read

Public Exploit Out for Actively Exploited Check Point Firewall Bug

Public Exploit Out for Actively Exploited Check Point Firewall Bug

Jul 29, 2026 · 1 min read

Critical TeamCity Flaw Lets Attackers Run Commands Without Logging In

Critical TeamCity Flaw Lets Attackers Run Commands Without Logging In

Jul 29, 2026 · 1 min read

24,000 Servers Leak Password Hashes via 20-Year-Old BMC Flaw

24,000 Servers Leak Password Hashes via 20-Year-Old BMC Flaw

Jul 29, 2026 · 1 min read

OpenWrt Patches Critical DHCPv6 RCE Flaw CVE-2026-53921

OpenWrt Patches Critical DHCPv6 RCE Flaw CVE-2026-53921

Jul 28, 2026 · 1 min read

OpenAI Models Exploited Artifactory Zero-Days, Breached Hugging Face

OpenAI Models Exploited Artifactory Zero-Days, Breached Hugging Face

Jul 28, 2026 · 1 min read

Adobe Acrobat Extension Flaw Let Sites Spy on Your WhatsApp Chats

Adobe Acrobat Extension Flaw Let Sites Spy on Your WhatsApp Chats

Jul 22, 2026 · 1 min read

Qilin Ransomware Gang Targets Businesses Via Palo Alto VPN Flaw

Qilin Ransomware Gang Targets Businesses Via Palo Alto VPN Flaw

Jul 21, 2026 · 1 min read

Update 7-Zip Now: RCE Flaw Found in Archive Processing

Update 7-Zip Now: RCE Flaw Found in Archive Processing

Jul 19, 2026 · 1 min read

Critical WordPress Flaws Let Hackers In Without a Password

Critical WordPress Flaws Let Hackers In Without a Password

Jul 18, 2026 · 1 min read

Opera GX Flaw Let Websites Secretly Install Spy Add-ons

Opera GX Flaw Let Websites Secretly Install Spy Add-ons

Jul 6, 2026 · 0 min read

Adobe Patches Critical Flaws in ColdFusion and Campaign

Adobe Patches Critical Flaws in ColdFusion and Campaign

Jul 5, 2026 · 1 min read

Ransomware Gangs Exploit Citrix Bleed 2 and Disable Security Tools

Ransomware Gangs Exploit Citrix Bleed 2 and Disable Security Tools

Jul 5, 2026 · 1 min read

Cisco Phone System Flaw Being Exploited — Patch Before June 28

Cisco Phone System Flaw Being Exploited — Patch Before June 28

Jun 27, 2026 · 1 min read

WordPress Plugin Flaw Exposed Email API Keys on 100,000 Sites

WordPress Plugin Flaw Exposed Email API Keys on 100,000 Sites

Jun 20, 2026 · 1 min read

Microsoft Patches Copilot Bug That Could Steal Your Emails

Microsoft Patches Copilot Bug That Could Steal Your Emails

Jun 15, 2026 · 1 min read

Critical Splunk Flaw Lets Anyone Take Over Your Server

Critical Splunk Flaw Lets Anyone Take Over Your Server

Jun 14, 2026 · 1 min read

phpBB Fixes Decade-Old Bug That Let Anyone Log In as Admin

phpBB Fixes Decade-Old Bug That Let Anyone Log In as Admin

Jun 13, 2026 · 1 min read

CISA Confirms Active Attacks on Linux and Android Devices

CISA Confirms Active Attacks on Linux and Android Devices

Jun 3, 2026 · 0 min read

Six Windows Zero-Days, No Patches: Researcher Threatens More

Six Windows Zero-Days, No Patches: Researcher Threatens More

May 29, 2026 · 1 min read

18-Year-Old NGINX Flaw Now Exploited — Web Servers at Risk

18-Year-Old NGINX Flaw Now Exploited — Web Servers at Risk

May 18, 2026 · 1 min read

Windows BitLocker Zero-Day Lets Attackers Read Protected Drives

Windows BitLocker Zero-Day Lets Attackers Read Protected Drives

May 13, 2026 · 1 min read

CISA Adds Cisco Catalyst SD-WAN Flaws to Known Exploited List

CISA Adds Cisco Catalyst SD-WAN Flaws to Known Exploited List

Apr 25, 2026 · 0 min read

BRIDGE:BREAK Flaws Expose 20,000 Serial-to-IP Converters

BRIDGE:BREAK Flaws Expose 20,000 Serial-to-IP Converters

Apr 21, 2026 · 0 min read

Recently Leaked Windows Zero-Days 'BlueHammer', 'RedSun', 'UnDefend' Actively Exploited

Recently Leaked Windows Zero-Days 'BlueHammer', 'RedSun', 'UnDefend' Actively Exploited

Apr 21, 2026 · 0 min read

Anthropic's MCP Protocol Design Flaw Potentially Exposes 200,000 Servers

Anthropic's MCP Protocol Design Flaw Potentially Exposes 200,000 Servers

Apr 18, 2026 · 0 min read

Hackers exploit Marimo flaw to deploy NKAbuse malware

Hackers exploit Marimo flaw to deploy NKAbuse malware

Apr 16, 2026 · 0 min read

Critical Adobe Acrobat Vulnerability (CVE-2026-34621) Actively Exploited

Critical Adobe Acrobat Vulnerability (CVE-2026-34621) Actively Exploited

Apr 14, 2026 · 0 min read

Rockstar Games Confirms Data Breach Involving Snowflake Server Vulnerability

Rockstar Games Confirms Data Breach Involving Snowflake Server Vulnerability

Apr 13, 2026 · 1 min read

Emergency Adobe Acrobat and Reader Update Fixes Zero-Day Exploited Since 2025

Emergency Adobe Acrobat and Reader Update Fixes Zero-Day Exploited Since 2025

Apr 12, 2026 · 1 min read

Chained Zero-Days in Ivanti EPMM Allow Remote Code Execution

Chained Zero-Days in Ivanti EPMM Allow Remote Code Execution

Apr 12, 2026 · 0 min read

Critical Authorization Bypass Flaw Patched in Docker Engine (CVE-2026-34040)

Critical Authorization Bypass Flaw Patched in Docker Engine (CVE-2026-34040)

Apr 11, 2026 · 1 min read

Critical RCE Flaw in Marimo Python Notebooks Actively Exploited (CVE-2026-39987)

Critical RCE Flaw in Marimo Python Notebooks Actively Exploited (CVE-2026-39987)

Apr 11, 2026 · 1 min read

Critical Zero-Interaction Vulnerability (CVE-2026-0049) Patched in Android 14, 15, and 16

Critical Zero-Interaction Vulnerability (CVE-2026-0049) Patched in Android 14, 15, and 16

Apr 11, 2026 · 1 min read

Critical Cisco ASA Zero-Day Actively Exploited in the Wild (CVE-2026-11234)

Critical Cisco ASA Zero-Day Actively Exploited in the Wild (CVE-2026-11234)

Apr 10, 2026 · 1 min read

Critical Flaw in Palo Alto Cortex XSOAR & XSIAM (CVE-2026-0234) Allows Resource Access

Critical Flaw in Palo Alto Cortex XSOAR & XSIAM (CVE-2026-0234) Allows Resource Access

Apr 9, 2026 · 1 min read

OpenClaw patches unauthenticated Telegram webhook resource-exhaustion flaw (CVE-2026-32980)

OpenClaw patches unauthenticated Telegram webhook resource-exhaustion flaw (CVE-2026-32980)

Apr 1, 2026 · 1 min read

Gigabyte Control Center flaw can allow remote file writes when pairing is enabled (CVE-2026-4415)

Gigabyte Control Center flaw can allow remote file writes when pairing is enabled (CVE-2026-4415)

Apr 1, 2026 · 1 min read

Smart Slider 3 flaw (CVE-2026-3098) can expose sensitive server files

Smart Slider 3 flaw (CVE-2026-3098) can expose sensitive server files

Mar 29, 2026 · 1 min read

CISA adds CVE-2025-53521 (F5 BIG-IP APM) to KEV after active exploitation

Mar 29, 2026 · 1 min read

ConnectWise patches ScreenConnect flaw that could enable unauthorized access

ConnectWise patches ScreenConnect flaw that could enable unauthorized access

Mar 18, 2026 · 0 min read

Anthropic launches Claude Code Security in limited research preview

Anthropic launches Claude Code Security in limited research preview

Mar 12, 2026 · 1 min read

CISA adds n8n RCE flaw (CVE-2025-68613) to KEV

CISA adds n8n RCE flaw (CVE-2025-68613) to KEV

Mar 11, 2026 · 0 min read

CISA flags SolarWinds, Ivanti, and Workspace ONE flaws as actively exploited

CISA flags SolarWinds, Ivanti, and Workspace ONE flaws as actively exploited

Mar 10, 2026 · 1 min read

Cisco warns additional SD-WAN Manager flaws are actively exploited

Cisco warns additional SD-WAN Manager flaws are actively exploited

Mar 5, 2026 · 0 min read

Google reports 90 zero-days exploited in 2025, with enterprise systems heavily targeted

Google reports 90 zero-days exploited in 2025, with enterprise systems heavily targeted

Mar 5, 2026 · 1 min read

CISA adds VMware Aria RCE flaw (CVE-2026-22719) to KEV

CISA adds VMware Aria RCE flaw (CVE-2026-22719) to KEV

Mar 4, 2026 · 0 min read

1 2 3 4 5 6 7 8 9 10