VulnerabilitiesCritical GitLab File-Read Flaw Exploited Within a Day of Patch Disclosure
Unauthenticated GitLab flaw CVE-2026-85706 (CVSS 10) exploited within a day. Learn affected versions, detection logs and patch deadline.
Vulnerabilities
More news
Page 1 / 23 · 200 articlesVulnerabilities
VulnerabilitiesUK Council Cyberattack Tied to Mass Exploitation of Critical SonicWall Flaw
UK council cyberattack linked to mass exploitation of CVE-2026-15409 in SonicWall SMA1000, enabling credential theft and Active Directory compromise.
VulnerabilitiesAttackers Chain JFrog Artifactory Flaws to Deploy Rust Backdoor
Attackers chain JFrog Artifactory flaws CVE-2026-42018 and CVE-2026-42016 to gain admin access, install Groovy plugins and Rust backdoor. Patch now.
VulnerabilitiesThree High-Severity Flaws Expose NextGen Mirth Connect Data and Credentials
CISA discloses three high-severity Mirth Connect flaws through 4.7.1, with SQL injection and XXE risking data theft and credential exposure.
VulnerabilitiesShieldCrash PoC Claims to Bypass Microsoft’s Fix for Defender Privilege Flaw
ShieldCrash PoC claims bypass of Microsoft's fix for CVE-2026-69414, enabling SYSTEM-level file reads on patched Windows via Defender.
VulnerabilitiesCisco FMC Zero-Auth Flaws Exploited by Qilin Ransomware and Sandworm-Linked Hackers
Cisco FMC zero-auth flaws exploited by Qilin ransomware, Sandworm-linked hackers, and a third cluster for ransomware, credential theft, and espionage.
VulnerabilitiesCheck Point Patches Two Critical VPN Certificate Flaws Allowing Unauthenticated RCE
Check Point fixes two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, with CVSS 9.8, enabling unauthenticated RCE on Security Gateways and Management.
VulnerabilitiesCISA Confirms WatchGuard Firebox RCE Is Being Used in Ransomware Attacks
CISA confirms critical WatchGuard Firebox RCE CVE-2025-14733 is exploited in ransomware attacks. Learn affected versions, risks, and patch guidance.
VulnerabilitiesFortinet CVE-2025-25249 Exploited at Scale to Install PivotC2 RAT
Attackers exploit Fortinet CVE-2025-25249 RCE flaw at scale, scanning 30,000+ IPs to install PivotC2 RAT on 178 devices for tunneling and data theft.