CISA Adds Zyxel Switch Buffer Overflow to Known Exploited Vulnerabilities Catalog
CISA added CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 switches, to its Known Exploited Vulnerabilities Catalog after evidence of active exploitation.
Tag
#Vulnerability
62 results in the archive.
CISA Warns of Active Exploitation of Three Linux Kernel Flaws
CISA has issued an alert about active exploitation of three Linux kernel vulnerabilities, including one critical severity flaw affecting Linux systems.
Critical Pre-Auth RCE Found and Exploited in Orkes Conductor Platform
A critical unauthenticated remote code execution vulnerability (CVE-2026-58138) in Orkes Conductor affecting versions prior to 3.30.2 is actively exploited and presents severe security risks.
Critical Check Point Flaw Allows Root Privilege Code Execution
Check Point Software disclosed and patched a critical vulnerability enabling attackers to execute code as root on management systems, risking full enterprise system compromise.
Critical RCE Flaw in Unbound DNSSEC Validator Fixed in 1.26.1
A critical heap overflow vulnerability in Unbound DNSSEC validator before version 1.26.1 allows remote code execution via malicious DNS zones.
Critical Issabel Framework Flaw Enables Unauthenticated OS Command Execution
A critical vulnerability in the Issabel Framework allows unauthenticated remote OS command execution, actively exploited and posing a severe security risk.
CISA Alerts on Ransomware Exploiting Critical VMware vCenter Flaw
CISA warns that ransomware gangs have begun exploiting a critical remote code execution vulnerability in VMware vCenter that was patched in July.
Critical Vulnerabilities Discovered in mySCADA myPRO Manager
Two critical vulnerabilities in mySCADA myPRO Manager allow unauthenticated attackers to access privileged management functions and send arbitrary SMS via connected GSM modems, affecting versions through 2.1.
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Globally
The state-sponsored threat actor Red Heron exploited a remote code execution vulnerability in Gitea to compromise 13 organizations across six countries in a rapid, targeted campaign.
GitLab CVSS 10 File-Read Flaw Faces In-the-Wild Probes
GitLab issued patches for a critical CVSS 10.0 path traversal flaw in its repository commits API that allows unauthenticated file reads and is being actively probed in the wild.
Cisco confirms active exploitation of critical FMC authentication bypass flaw
Cisco has confirmed active exploitation of a critical authentication bypass vulnerability (CVE-2026-20079) in its Secure Firewall Management Center software, risking enterprise defenses.
Critical MikroTik SSH Bypass Exploited - Patch Immediately
MikroTik released a patch for an SSH authentication bypass vulnerability currently exploited to create unauthorized accounts on devices.
Attackers Breach JetBrains Cadence via Unpatched TeamCity
JetBrains suffered a breach after attackers exploited an unpatched TeamCity vulnerability to access Cadence and extract AWS credentials.
Critical Citrix NetScaler Auth Bypass Flaw Exploited in Attacks
Attackers are actively exploiting a critical authentication bypass vulnerability in Citrix NetScaler, significantly impacting enterprise security.
Critical Elementor Pro Flaw Enables Takeover of WordPress Sites
A critical vulnerability (CVE-2026-32475) in Elementor Pro is actively exploited to deliver webshells and execute commands on WordPress servers.
Critical JFrog Artifactory Flaw Exploited Days After Patch
Attackers are actively exploiting CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, shortly after its public disclosure and patch release.
GiveWP WordPress Plugin Flaw Lets Hackers Execute Server Commands
A critical vulnerability in the GiveWP donation plugin for WordPress allows unauthenticated attackers to execute arbitrary commands on the hosting server.
Critical cPanel Flaw Lets Single Hosting Customer Gain Root Access
A critical vulnerability in cPanel & WHM's domain parking and addon domain features enables a hosting customer to gain root access, posing a significant threat to server security.
PaperCut issues second emergency patch for exploited NG and MF flaws
PaperCut released a second emergency patch addressing two actively exploited vulnerabilities in its NG and MF print management software after initial mitigations were bypassed.
Three CVSS 10.0 ServiceNow Flaws Enable Code Execution and SQL Injection
ServiceNow fixed four security flaws in its AI Platform, including three critical CVSS 10.0 vulnerabilities that allow unauthenticated code execution and SQL injection.
Critical Vulnerabilities Found in Xiiaozet LK100W Devices
Multiple critical vulnerabilities in Xiiaozet LK100W devices could allow attackers to remotely gain full control, with version 2.1.240 addressing these risks.
PaperCut NG and MF Zero-Day Flaw Actively Exploited in Attacks
A critical zero-day vulnerability in all versions of PaperCut NG and MF print management software is actively exploited in attacks, affecting organizations using these products.
Critical Vulnerabilities Found in Ebyte NE2-D11 Firmware
Multiple critical vulnerabilities in Ebyte NE2-D11 devices allow unauthorized administrative access, data exposure, and operational disruption, affecting critical infrastructure controls.
Hackers Breached 270+ Zimbra Servers via Critical RCE Vulnerability
Over 270 Zimbra Collaboration Suite servers have been breached through exploitation of a critical remote code execution vulnerability, exposing organizations to significant security risks.
CISA Adds Oracle HTTP Server Vulnerability to Known Exploited Catalog
CISA has added CVE-2026-21962, an Oracle HTTP Server and WebLogic Server Proxy Plug-in vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation.
Critical Keycloak Password Reset Flaw Could Let Attackers Hijack Any Account
A critical vulnerability rated 9.1 CVSS in Keycloak allows unauthenticated attackers to hijack user accounts by forcing password resets, with patches released by Red Hat and the Keycloak project.
GitLab CVE-2026-19478 Exploited Days After Disclosure
A critical code injection vulnerability in GitLab, CVE-2026-19478, is actively exploited shortly after disclosure, enabling unauthenticated attackers to modify or delete certain publicly accessible projects.
Microsoft patches critical Entra ID flaw exploited in active attacks
Microsoft released a patch for a critical vulnerability in Entra ID that is actively exploited in targeted attacks, affecting identity and access management security.
CISA Warns of Active Exploitation of Critical MLflow Vulnerability
CISA warns that threat actors are actively exploiting a critical vulnerability in the MLflow AI engineering platform, posing risks to federal agencies and beyond.
Critical NetScaler Flaw Can Bypass Authentication on Gateway Servers
Citrix has patched critical authentication bypass vulnerabilities affecting NetScaler ADC and Gateway, impacting specific FIPS and NDcPP builds used on gateway and AAA servers.
CISA: Ransomware Gangs Exploiting Windows Task Host Flaw
CISA confirms ransomware groups are actively exploiting a high-severity Windows Task Host vulnerability, posing increased risk to enterprise environments.
Critical Out-of-Bounds Read Vulnerability in Siemens Parasolid
A high-severity out-of-bounds read vulnerability in Siemens Parasolid parsing X_T files allows potential arbitrary code execution, affecting versions prior to V38.0.235 and V38.1.230.
AI-Assisted Exploit Enables Unauthenticated RCE on SharePoint Servers
A critical SharePoint vulnerability (CVE-2026-55040) enables unauthenticated remote code execution, facilitated by AI, affecting several SharePoint Server versions.
Cisco Patches 12 Critical SD-WAN and IOS XE Vulnerabilities
Cisco released patches for 12 critical vulnerabilities in Catalyst SD-WAN and IOS XE software impacting devices in all configurations.
Veeam, Terraform MCP, and Django Patch Critical Vulnerabilities Including CVSS 10.0 Bug
HashiCorp, Veeam, and the Django Software Foundation released patches for 11 vulnerabilities, including a critical CVSS 10.0 cross-tenant bug affecting Terraform MCP Server, Veeam Service Provider Console, and Django software.
Critical cPanel Flaw Lets Hosting Customers Run SQL as Database Root
A critical vulnerability in cPanel (CVE-2026-58048) allowed authenticated hosting customers to execute SQL commands with root database privileges, risking full database control.
Critical Integrity Flaw in Thermo Fisher Genetic Analyzers Could Alter DNA Data
A high-severity vulnerability in Thermo Fisher Applied Biosystems Genetic Analyzers allows modification of DNA data output files, risking inaccurate test results in healthcare settings.
Adobe Campaign Classic CVSS 10.0 Flaw Enables Code Execution Without User Action
Adobe Campaign Classic includes a critical CVSS 10.0 vulnerability (CVE-2026-48449) that allows arbitrary code execution without user interaction.
Azure Cosmos DB Flaw Exposed Platform-Wide Access Key
A critical vulnerability in Azure Cosmos DB enabled attackers to escape the Gremlin query sandbox and gain full read/write access to multiple customer databases.
JetBrains warns of critical TeamCity remote code execution flaw
JetBrains disclosed a critical authentication bypass vulnerability in TeamCity On-Premises that enables remote code execution, posing significant risk to enterprise environments.
Critical Ruby on Rails Flaw Lets Attackers Read Server Files via Image Uploads
A critical Active Storage vulnerability in Ruby on Rails allows unauthenticated attackers to read arbitrary server files through malicious image uploads, risking exposure of sensitive data.
Critical Ruflo MCP Flaw Enables Remote Code Execution and AI Memory Poisoning
A critical vulnerability in the Ruflo open-source agent platform allows unauthenticated remote code execution and poisoning of AI memory, posing significant risks to AI model operations.
Three Critical VMware Flaws Enable Auth Bypass and VM Escape
Broadcom published updates for critical VMware vulnerabilities in ESX, vCenter, Workstation, and Fusion enabling authentication bypass and VM escape with high severity.
vBulletin fixes critical pre-auth RCE flaw with public exploit
A critical pre-authentication remote code execution vulnerability in vBulletin forum software has been patched following the public release of an exploit, enabling unauthenticated attackers to execute arbitrary PHP code.
Fastjson 1.x RCE Vulnerability Actively Targeted, No Patch Available
Attackers are exploiting a critical remote code execution vulnerability in Fastjson 1.x used in Spring Boot applications, enabling unauthenticated code execution with Java process privileges and no patch currently available.
Critical Bing Image Flaw Allows SVGs to Execute Commands as SYSTEM
A crafted SVG submitted to Bing image search can execute commands as NT AUTHORITY\SYSTEM on Microsoft’s production servers, impacting multiple hosts with critical security implications.
Critical Privilege Escalation Vulnerabilities Found in Weintek cMT3092X HMI
Multiple high-severity vulnerabilities in Weintek cMT3092X HMI may allow attackers to escalate privileges and steal credentials, impacting critical manufacturing environments.
CISA Urges Immediate Patching of Exploited Fortinet FortiSandbox Flaws
CISA has directed federal agencies to urgently patch two actively exploited vulnerabilities in Fortinet FortiSandbox, highlighting critical risks to government and enterprise environments.
Critical wp2shell WordPress Flaw Allows Unauthenticated Code Execution
A critical vulnerability in WordPress core enables unauthenticated attackers to execute code on default installations, prompting urgent patch releases.
CISA Warns to Patch Actively Exploited SharePoint Vulnerabilities
CISA issued a warning about three actively exploited vulnerabilities in Internet-exposed on-premises SharePoint Server instances that allow remote compromise.
Zoom warns of critical account takeover vulnerability
Zoom has disclosed a critical vulnerability in its Windows desktop client and SDK that enables unauthenticated attackers to hijack user accounts, posing a significant security risk.
SAP Patches Critical CVSS 9.9 Flaw in NetWeaver ABAP
SAP released updates fixing a critical CVSS 9.9 out-of-bounds write vulnerability in NetWeaver ABAP that may allow authenticated attackers to corrupt memory and manipulate data.
SonicWall alerts on critical SMA1000 zero-day flaws in active attacks
SonicWall disclosed two critical zero-day vulnerabilities in SMA1000 devices being exploited in active attacks, highlighting urgent risk to enterprise network security.
CISA warns of active RCE flaws in Joomla iCagenda and Balbooa Forms extensions
CISA warns that remote code execution vulnerabilities are actively exploited in Joomla iCagenda and Balbooa Forms extensions through arbitrary file uploads, risking full compromise of affected sites.
Critical Authenticated File Write Vulnerability in OpenPLC v3 Affects Industrial Systems
OpenPLC v3 contains a critical authenticated arbitrary file write vulnerability that can lead to native code execution through compiling malicious files. This affects critical infrastructure sectors worldwide and requires urgent mitigation.
Study Finds Traffic Leaks and Security Flaws in 281 Free Android VPN Apps
Researchers tested 281 popular free Android VPN apps and discovered many leak user traffic, transmit unencrypted data, and include tracking. These apps, collectively installed over 2.4 billion times, fail to meet basic privacy and security standards.
Ubiquiti Patches Critical UniFi Flaws in Multiple Key Products
Ubiquiti released updates to fix critical vulnerabilities in UniFi Connect, Talk, Access, Protect, and OS. These flaws could allow privilege escalation and arbitrary command execution.
Threat Actors Probe Critical Gitea Docker Flaw CVE-2026-20896
Threat actors are actively attempting to exploit a critical vulnerability in Gitea Docker images less than two weeks after it was patched. The flaw allows unauthenticated clients to escalate privileges by abusing the 'X-WEBAUTH-USER' header.
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host
A critical use-after-free flaw in Linux's KVM hypervisor allows guest VMs on Intel and AMD systems to corrupt host kernel memory, potentially escaping the virtual environment. The vulnerability, known as Januscape (CVE-2026-53359), includes a public PoC that crashes hosts with a more impactful exploit reportedly in development.
Max severity Adobe ColdFusion flaw actively exploited in attacks
A critical Adobe ColdFusion vulnerability, CVE-2026-48282, is now being actively exploited in cyberattacks, according to KEVIntel. This flaw demands immediate attention due to its maximum severity rating.
Bad Epoll Linux Kernel Flaw Lets Unprivileged Users Gain Root Access
A new Linux kernel vulnerability, Bad Epoll (CVE-2026-46242), allows unprivileged users to escalate to root, impacting Linux desktops, servers, and Android devices. A patch has already been released.
Unpatched Flaws Found in FatFs Filesystem Affecting Millions of Devices
Security firm runZero disclosed seven vulnerabilities in FatFs, a widely used filesystem library in embedded devices including security cameras and drones. These flaws pose a risk due to FatFs's ubiquity in consumer and industrial firmware.