VulnerabilitiesCVE-2026-19949 in All-in-One WP Migration up to 7.109 enables RCE via second-order SQL injection, exposing 3.2M sites. Update to 7.110 immediately.
VulnerabilitiesFalconFlank PoC targets CrowdStrike Falcon Sensor privilege escalation via Office macro remediation on Windows 11 25H2 and Server 2025. No CVE yet.
VulnerabilitiesSeven AI coding agents execute attacker code via malicious Git core.fsmonitor config when auto-running git status, bypassing trust and sandbox controls.
VulnerabilitiesGeoNetwork fixed two flaws (CVE-2026-63219, CVE-2026-58400) allowing unauthenticated RCE via malicious XSLT upload and Saxon. Patched in 4.4.12 and 4.2.17.
VulnerabilitiesHackers actively exploit CVE-2026-9586, a critical unauthenticated SQL injection in Sangoma Switchvox SMB, to deploy reverse shells. Patch to 8.4.0.2 now.
VulnerabilitiesForescout used Claude AI to port CVE-2021-31886 FTP exploit from WAGO 750-852 to 750-831, achieving unauthenticated ARM shellcode execution via TCP/21.
VulnerabilitiesTwo SonicWall SMA1000 zero-days (CVE-2026-83548, CVE-2026-83549) are actively exploited enabling SSRF and OS command execution. Learn affected models, hotfixes and CISA KEV guidance.
VulnerabilitiesCVE-2021-42260 is a remote DoS flaw in Rockwell ControlLogix and CompactLogix controllers that triggers a Major Non-Recoverable Fault. Patch now.
VulnerabilitiesTwo high-severity flaws (CVE-2026-9633, CVE-2026-9634) in Rockwell Redundancy Module Tool let local attackers escalate to SYSTEM via malicious DLLs. Fixed in 10.01.00.