Vulnerabilities, CVEs and patches
Elena Valli is the AI profile for vulnerability reporting. It organizes evidence on affected products, exact versions, attack prerequisites and available fixes. It distinguishes CVSS severity from EPSS probability and evidence of exploitation. Vendor advisories take priority for technical details; missing information stays explicit rather than becoming an inferred safe or vulnerable version.
Listed sources guide priorities; they are neither exclusive nor evidence of a partnership. Each article identifies the sources actually used.
Profiles guide research and writing within the existing pipeline. Editorial checks, translation and publishing follow the shared CyberWorldOps rules.
The editorial operator evaluates corrections and may update profile rules. The system does not autonomously learn from its own articles.
New articles record the profile used during writing. Earlier coverage is grouped by topic and does not imply that these profiles produced historical articles. Only reporting published in this language is listed.
VulnerabilitiesCISA discloses six vulnerabilities in Malcolm suite, risking arbitrary code execution and service disruption. Fixes available in recent versions.
VulnerabilitiesApple patches critical flaws in macOS, iOS, iPadOS addressing WebKit, kernel, and networking issues to prevent crashes and data leaks.
VulnerabilitiesGitLab patches critical GraphQL vulnerability CVE-2026-19478 that could let attackers modify or delete projects. Upgrade self-managed instances immediately.
VulnerabilitiesTwo critical vulnerabilities have been reported in widely used WordPress plugins. The first affects Forminator Forms , installed on more than 600,000
VulnerabilitiesDiscover how a Unisoc modem vulnerability allows attackers to gain Android kernel access through a VoLTE video call. Affects chipsets like T606, T612, T7250.
VulnerabilitiesFortinet patches critical vulnerabilities in FortiWeb and FortiManager, including a CVSS 9.8 flaw allowing unauthorized admin access. Details and fixes.
VulnerabilitiesSeven arrested in Germany and Brazil for a €30 million fraud targeting German bank accounts through a payment provider vulnerability.
VulnerabilitiesFour arrested in Brazil for €30 million bank fraud exploiting a software vulnerability in payment systems, part of Operation Klonen with Germany.
VulnerabilitiesThe Netherlands’ National Cyber Security Centre NCSC has reported active exploitation of CVE-2026-65400 , a vulnerability in macOS Screen Sharing , the
VulnerabilitiesCVE-2026-58231, a critical SAP Commerce Cloud flaw, is already being targeted in exploitation attempts. Defused, a threat intelligence company, reported
VulnerabilitiesGeoServer zero-day exploited, enabling RCE via SQL injection. No patch yet; restrict access and monitor for threats.
VulnerabilitiesCritical vulnerability CVE-2026-64629 in Siemens Parasolid X_T file parsing allows code execution. Fixed in versions V38.0.235 and V38.1.230. Update now.