VulnerabilitiesCVE-2026-69836: Critical Vulnerability Exploited in Microsoft Entra ID, but Customers Need Take No Action
Microsoft fixes critical CVE-2026-69836 in Entra ID, fully mitigated. No patches needed. Exploited in attacks but resolved.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 20
More news
Page 20 / 48 · 427 articlesVulnerabilities
VulnerabilitiesGitLab CVE-2026-19478 Actively Exploited Days After Disclosure
Critical GitLab vulnerability CVE-2026-19478 actively exploited within days. Updates required for CE and EE versions to prevent code injection attacks.
MalwareThree Compromised Rust Crates Distributed Malware During Compilation
Three compromised Rust crates infected software builds with malware during compilation, bypassing security measures and affecting dependencies.
VulnerabilitiesAtlassian and Splunk Patch More Than 250 Vulnerabilities in Their Products
Atlassian and Splunk release security updates fixing over 250 flaws in products like Jira, Confluence, and Splunk Enterprise, focusing on third-party dependencies.
VulnerabilitiesZimbra CVE-2026-73570 Exploited in the Wild: Who Needs to Patch Immediately
CVE-2026-73570 in Zimbra Collaboration is actively exploited. Learn who needs to patch immediately, the vulnerability details, and security steps.
VulnerabilitiesCybersecurity, August 20 Threats: From Gogs to macOS, Signed Drivers, and Targeted Campaigns
Explore critical cybersecurity threats from August 20, including Gogs RCE, macOS vulnerabilities, and abuse of signed drivers.
VulnerabilitiesZimbra Vulnerability Exploited to Enable Unauthenticated Remote Command Execution
Active exploitation of CVE-2026-73570 in Zimbra allows unauthenticated RCE. Affects versions before 10.1.20 with SNMP enabled. Upgrade to 10.1.20 or later for fix.
VulnerabilitiesElementor Pro, Critical Vulnerability in Forms: File Upload Could Lead to Code Execution
Critical flaw in Elementor Pro (CVE-2026-32475) lets attackers upload PHP files to execute code remotely. Affects versions before 4.2.2. Update immediately.
VulnerabilitiesMLflow Under Attack: Critical SSRF Exposes Cloud Credentials and Internal Services
MLflow's critical SSRF flaw (CVE-2026-64849) allows attackers to access cloud credentials and internal services, with active exploitation reported.