Attackers Turn WordPress Template Flaw Into Remote Code Execution Within Hours
Critical WordPress flaw CVE-2026-87902 is exploited within hours via pearcmd.php for RCE. Learn affected themes, attack chain, and fix in 7.1.2.
Vulnerabilities
More news
Page 12 / 39 · 347 articles
Active Attacks Turn Check Point VPN and Management Flaws Into an Immediate Patch Priority
Check Point confirms active exploits of two critical 9.8 flaws in VPN gateways and management servers. CISA sets Sept 25 patch deadline.
Attackers Turn Network Management Consoles Into Gateways for Infrastructure-Wide Compromise
Attackers exploit Cisco FMC and ISE flaws for root access, credential theft and ransomware, turning consoles into infrastructure-wide gateways.
Public AF_UNIX Exploit Breaks Ubuntu Container Isolation and Reaches Host Root
Public CVE-2026-80521 exploit uses Linux AF_UNIX use-after-free to escape Ubuntu containers to host root, bypassing default Docker seccomp controls.
OpenPLC Web Flaw Could Turn a Stolen Session into Industrial Process Control
CVE-2026-88020 XSS in OpenPLC Runtime v3 lets attackers hijack operator sessions and alter PLC state. No patch yet; CISA urges network isolation.
Actively Exploited BIG-IP APM Flaw Gives Remote Attackers a Path to Code Execution
F5 warns CVE-2026-94127 BIG-IP APM heap flaw is exploited for unauthenticated RCE when OAuth Authorization Server is enabled. Patch now.
BigDiskBuster Can Freeze Microsoft Defender Updates Without Shutting Down Antivirus Protection
BigDiskBuster may block Microsoft Defender updates while antivirus remains active, leaving protection data stale. No CVE or active exploitation is confirmed.
Active Attacks Target Certificate-Enabled VeloCloud Orchestrator Servers
Arista warns attackers exploit critical CVE-2026-93952 in on-prem VeloCloud Orchestrator with certificate auth, risking full host compromise.
SharePoint Code-Injection Flaw Opens a Low-Privilege Route to Remote Server Control
CVE-2026-65660 lets low-privilege users run code on SharePoint Server via SafeControls bypass. Learn impact, affected versions and patch steps.