VulnerabilitiesCitrix NetScaler: Exploitation Attempts Target Critical Vulnerability CVE-2026-19490
Attackers target CVE-2026-19490, a NetScaler ADC and Gateway auth bypass. PoC attempts seen from 3 countries. Patch vulnerable AAA, VPN configs now.
Vulnerabilities — Page 3
More news
Page 3 / 21 · 187 articlesVulnerabilities
VulnerabilitiesSangoma Switchvox Under Attack: Critical SQL Injection Enables Remote Code Execution
CVE-2026-9586 in Sangoma Switchvox exploited via unauthenticated SQL injection at /pa enabling RCE. Update to 8.4.0.2 and hunt for compromise.
VulnerabilitiesWordPress Under Attack: More Than 440,000 Attempts Target Super Forms and Elementor Pro
Over 440,000 attacks exploit critical unauthenticated file upload flaws in Super Forms and Elementor Pro, enabling remote code execution. Update now.
VulnerabilitiesChrome Fixes Sixth Zero-Day of 2026: Active Attacks Target V8 Engine
Google patched CVE-2026-85046, a V8 type confusion zero-day exploited in the wild. Update Chrome to 152.0.7977.82+ immediately to stay protected.
VulnerabilitiesIgnition: Incorrect Default Permissions Allow Unauthorized Project Creation
CVE-2026-77393 lets authenticated Ignition users create projects due to empty default role; affects 8.1.53 and earlier, fixed in 8.1.54.
VulnerabilitiesCisco Nexus 9000: Critical Flaw Enables Remote Root Code Execution
Cisco fixed CVE-2026-20212 (CVSS 9.8) in 10 Nexus 9000 models allowing unauthenticated remote root code execution via TCP ports 43210, 43211.
VulnerabilitiesArubaOS-CX Critical Vulnerability Exposes HPE Switches to Remote Code Execution
HPE fixed CVE-2026-73749, a critical 9.8 unauthenticated RCE flaw in ArubaOS-CX switches, plus 23 other vulnerabilities. Update affected versions now.
VulnerabilitiesTycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control
CISA flags two Tycon TPDIN-Monitor-WEB2 flaws pre-2.4.5, including critical auth bypass CVE-2026-61884 allowing relay control. Fix: update to 2.4.5.
VulnerabilitiesCisco Discloses New Vulnerabilities in Secure Email, IOS XR, Nexus 9000 Switches, and IP Phones
Cisco disclosed Sept 2026 flaws in Secure Email, IOS XR, Nexus 9000 and IP Phones, including S/MIME decryption issues, RCE and root compromise risks.