Topic
614 articles
Active ExploitCVE-2026-118527 in Ivanti Connect Secure (Input Validation) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch rel
Threat IntelCVE-2026-119568 in Vsftpd (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.0.5 and later.
Threat IntelCVE-2026-82104 in In Teltonika Networks RUTOS devices running versio (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Threat IntelCVE-2023-22793 in A Vulnerability allowing an unauthenticated attacker (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch
AWS CloudCVE-2026-79916 in AWS Enterprise Services (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.10.5-lts and
CiscoCVE-2026-76418 in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (Security Vulnerability) allows remote attackers to trigger active syste
Threat IntelCVE-2026-119050 in PandasTools Agno (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.1.11 and later.
Threat IntelCVE-2026-97854 in Yamaha wireless LAN router NWR100 provided by Yama (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Threat IntelCVE-2026-114358 in This vulnerability exists in the Radius Xenia M2M (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Threat IntelCVE-2026-66088 in In openEQUELLA (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026.1 and later.
Threat IntelCVE-2026-118690 in Signal K Server (Missing Authentication) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.33.0 and later.
VMware ESXiCVE-2026-41709 in Broadcom VMware ESX (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch
Threat IntelCVE-2026-115968 in Ultimate Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code executio
Threat IntelCVE-2026-114278 in The che-machine-exec service constructs a shell co (OS Command Injection) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-86400 in Dell PowerProtect Data Domain, Feature Release ver (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
CMS SecurityCVE-2026-84999 in The Pie Register Premium plugin for WordPress is v (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution
Threat IntelCVE-2026-112352 in Sunhillo SureLine (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 9.1.5 and later.
GoogleCVE-2026-111497 in Google Brotli (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Version 1.2.0.
Active ExploitCVE-2026-48356 in Adobe Commerce and Magento (Unrestricted File Upload) allows remote attackers to trigger active system exploitation. Patch: Vendor securi
Threat IntelCVE-2026-117603 in Electrum (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 4.7.2 and later.
Threat IntelCVE-2026-35002 in Agno (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.3.24 and later.
CMS SecurityCVE-2026-92885 in The Qode Membership plugin for WordPress is vulner (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
GoogleCVE-2026-93328 in Google Path Traversal and Missing Authorization in cloud- (Path Traversal) allows remote attackers to trigger arbitrary code execution. P
CMS SecurityCVE-2026-115214 in The Datawiza Proxy Auth Plugin WordPress plugin b (Privilege Escalation) allows remote attackers to trigger arbitrary code execution. P