Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
228 articles
CVE-2026-84869 is a critical zero-day in ConnectWise ScreenConnect allowing unauthorized file transfers and code execution during remote sessions. Patch to version 26.6.5 immediately.
CVE-2026-81578 and CVE-2026-82078 are critical PaperCut NG/MF vulnerabilities under active exploitation, enabling rapid domain compromise. Patch immediately to prevent credential theft and privilege escalation.
CVE-2017-16740 is a high-severity flaw in Rockwell Automation PLCs, exposing critical infrastructure to remote manipulation. Patch or isolate affected devices immediately.
Cisco has released urgent patches for CVE-2026-20303 and related critical vulnerabilities in SD-WAN and IOS XE, with CVSS scores up to 9.9. Immediate patching is required to prevent remote code execution and privilege escalation.
CVE-2024-24919, CVE-2024-8190, CVE-2024-8963, CVE-2024-9380, CVE-2025-31161, and CVE-2026-1731 are critical vulnerabilities exploited by the QTFY group for espionage and credential theft. Immediate patching is required to prevent persistent compromise.
CVE-2026-8452 is a critical unauthenticated remote code execution flaw in Citrix NetScaler ADC and Gateway, now exploited in the wild. Patch immediately to prevent system compromise.
CVE-2026-20349 is a critical zero-day in Cisco Secure Firewall ASA and FTD, enabling remote DoS via SSL VPN. Cisco urges immediate patching due to active exploitation.
CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415 are high-severity flaws in Zoom's annotation feature enabling remote code execution. Patch Zoom clients immediately.
CVE-2026-55040 is a high-severity SharePoint vulnerability enabling remote, unauthenticated access and data modification. Patch immediately—exploitation is active.
CVE-2026-73570 is a critical Zimbra Collaboration Suite flaw enabling unauthorized access and user impersonation. CISA mandates urgent patching due to active exploitation since August 2026.
CVE-2026-68820 (high severity) enables remote code execution on Windows, exploited in the wild by Lazarus Group. Patch immediately to prevent full system compromise.
CVE-2026-20349 is a critical zero-day in Cisco Secure Firewall ASA and FTD, enabling remote unauthenticated denial-of-service. Cisco urges immediate patching.