VulnerabilitiesCVE-2026-82222: The Critical Vulnerability in GiveWP That Exposes WordPress to Command Execution
CVE-2026-82222: Critical GiveWP plugin flaw enables remote command execution on WordPress sites. Update to version 4.16.7.2 to fix.
Vulnerabilities — Page 6
More news
Page 6 / 21 · 187 articlesVulnerabilities
VulnerabilitiesGitea under attack: critical RCE CVE-2026-60004 in KEV catalog, over 8,300 servers exposed
Critical RCE flaw CVE-2026-60004 in Gitea enables remote code execution. 8,300+ servers exposed. Patch to version 1.27.1 now.
VulnerabilitiesTwo root attack chains on Unitree G1 EDU: one via network, one via Bluetooth
Two root exploit chains for Unitree G1 EDU: network path traversal and Bluetooth with cloud flaw. Partial fixes.
VulnerabilitiesCosmos EVM, Critical Flaw Without CVE: Six Blockchains Affected, Silent Patch Did Not Stop the Exploit
A critical flaw in Cosmos EVM was exploited on six blockchains, causing millions in losses despite a silent patch.
VulnerabilitiesU.S. Power Grid: Executive Order 14420 Declares National Emergency Over Foreign Supply
Executive Order 14420 declares a U.S. national emergency due to foreign supply risks to the electric grid, outlining scope, assessment, and implementation.
VulnerabilitiesZBT: Two New Factory Implants in Chinese Routers Expose Remote Root Access
On August 28, 2026, The Hacker News confirmed through the IEEE registered MAC prefix database that the blocks 78:A3:51 and F8:5E:3C belong to Shenzhen
VulnerabilitiesPaperCut Under Attack: Zero-Day Exploited, Emergency Patch, and Order to Isolate Servers
PaperCut software hit by zero-day exploit; emergency patch issued. Isolate servers to prevent attacks. Details on vulnerabilities and remediation steps.
VulnerabilitiesRockwell Automation OTTO Fleet Manager: Weak bcrypt Hashes Put Credentials at Risk
Rockwell Automation patches OTTO Fleet Manager CVE-2026-75112, where weak bcrypt hashes expose credentials to offline attacks. Update to V2.36.3.
VulnerabilitiesXiiaozet LK100W: Three Vulnerabilities, Two Critical, Full Device Control at Risk
On August 27, 2026, CISA published an advisory regarding three vulnerabilities in the Xiiaozet LK100W device, manufactured by the Chinese company