Progress LoadMaster flaw hits CISA KEV
Progress LoadMaster flaw hits CISA KEV CISA says Progress Kemp LoadMaster CVE-2026-8037 is being actively exploited. Unpatched edge load balancers can allow...
TeamCity RCE lands in CISA's exploited list
TeamCity RCE lands in CISA's exploited list CISA says JetBrains TeamCity CVE-2026-63077 is being exploited, a critical flaw that can let unauthenticated...
TeamCity RCE Hits CISA KEV
TeamCity RCE Hits CISA KEV CISA says JetBrains TeamCity CVE-2026-63077 is being exploited: unauthenticated requests can run commands on on-prem build...
TP-Link Omada ZTP flaws put controller trust in focus
TP-Link Omada ZTP flaws put controller trust in focus Forescout disclosed 15 TP-Link Omada zero-touch provisioning flaws that could expose controller secrets...
N-able N-central patch bypass hits KEV
N-able N-central patch bypass hits KEV CVE-2026-18577 in N-able N-central can let attackers bypass login and take admin control of RMM consoles that reach...
N-central auth bypass exploited against MSP consoles
N-central auth bypass exploited against MSP consoles N-able says CVE-2026-18577 let attackers remotely gain admin access to vulnerable N-central RMM servers...
Fuyao TV Boxes Turn Homes Into Proxy Tunnels
Fuyao TV Boxes Turn Homes Into Proxy Tunnels Bitsight says Fuyao-linked Android TV boxes can masquerade as phones for ad fraud and relay stranger traffic...
CosmosEscape Exposed a Cloud Database Master Key
CosmosEscape Exposed a Cloud Database Master Key Wiz disclosed CosmosEscape, an Azure Cosmos DB Gremlin API vulnerability chain that could expose a platform-...
Ruflo RufRoot MCP flaw opens AI-agent bridge
Ruflo RufRoot MCP flaw opens AI-agent bridge Ruflo CVE-2026-59726 exposed an unauthenticated MCP bridge that could let outsiders run tools, steal provider...
OpenWrt DHCPv6 flaw puts routers on urgent patch watch
OpenWrt DHCPv6 flaw puts routers on urgent patch watch OpenWrt CVE-2026-53921 is a critical DHCPv6 overflow in odhcpd that could let reachable requests run...
vBulletin Pre-Auth RCE Gets Public Exploit
vBulletin Pre-Auth RCE Gets Public Exploit Public exploit details for vBulletin CVE-2026-61511 show how unpatched self-hosted forums could face pre-auth code...
NodeBB patches forum flaws exposing private areas
NodeBB patches forum flaws exposing private areas NodeBB patched eight high-severity flaws that could expose admin views, private chats, and hidden forum...
Check Point SmartConsole Admin Bypass Patched
Check Point SmartConsole Admin Bypass Patched Check Point patched CVE-2026-16232, an actively exploited SmartConsole authentication bypass that can grant...
Windmill File-Read Flaw Under Active Exploitation
Windmill File-Read Flaw Under Active Exploitation Windmill CVE-2026-29059 is being exploited to read server files without authentication; if a superadmin...
SharePoint Machine-Key RCE Warning
SharePoint Machine-Key RCE Warning SharePoint CVE-2026-50522 is a critical on-prem server RCE now reported under active exploitation after public PoC...
ServiceNow Sandbox-Escape RCE Exploited
ServiceNow Sandbox-Escape RCE Exploited Attackers are reportedly exploiting ServiceNow AI Platform CVE-2026-6875, a sandbox-escape RCE risk for enterprise...
SharePoint RCE Zero-Day Hits CISA KEV
SharePoint RCE Zero-Day Hits CISA KEV CISA added Microsoft SharePoint Server CVE-2026-58644 to KEV after exploitation in the wild; defenders should patch on-...
CISA Pushes Urgent Oracle EBS Payment Patches
CISA Pushes Urgent Oracle EBS Payment Patches CISA says Oracle E-Business Suite Payments CVE-2026-46817 is being actively exploited and ordered rapid...
SonicWall SMA Zero-Days Under Active Exploit
SonicWall SMA Zero-Days Under Active Exploit SonicWall patched two actively exploited SMA 1000 zero-days, CVE-2026-15409 and CVE-2026-15410, affecting...
SAP July patches close critical enterprise flaws
SAP July patches close critical enterprise flaws SAP's July 2026 updates fix critical NetWeaver, Approuter, and Commerce Cloud flaws that could expose or...