Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
286 articles
CVE-2025-41451 and CVE-2025-41452 (high severity) enable remote exploitation of Danfoss, Copeland, and Dixell refrigeration controllers. Immediate patching is critical to prevent physical damage and fire risk.
CVE-2025-61882 is a high-severity zero-day in Oracle E-Business Suite, exploited in the wild by Cl0p to breach Estée Lauder in August 2025. Immediate patching is critical.
CVE-2026-15409 and CVE-2026-15410 are critical zero-days in SonicWall SMA 1000 VPN appliances, exploited for root access and credential theft since June 2026. Immediate patching is mandatory.
CVE-2026-29059 is a high-severity unauthenticated path traversal flaw in Windmill, actively exploited to read arbitrary server files. Patch immediately to prevent credential theft and code execution.
CVE-2026-50522 is a critical remote code execution vulnerability in Microsoft SharePoint, actively exploited to steal machine keys and maintain persistent access. Patch released July 14, 2026; immediate action required.
CVE-2026-88771, CVE-2026-88772, CVE-2026-88779, and CVE-2026-107406 are critical, actively exploited Citrix NetScaler ADC/Gateway vulnerabilities enabling remote code execution and persistent compromise. Immediate patching is mandatory.
CVE-2026-90817 is a high-severity REDCap vulnerability enabling remote code execution, now exploited in active Monero mining attacks. Immediate patching is critical.
CVE-2024-36401 is a high-severity GeoServer vulnerability enabling remote code execution, now exploited in active Rondo botnet attacks. Patch immediately to prevent compromise.
CVE-2026-8933 is a high-severity local privilege escalation in Ubuntu's snap-confine, allowing root access via race condition; patch immediately.
CVE-2026-41940 (high severity) enables remote attackers to bypass authentication on cPanel and WHM servers via malicious GitHub Actions workflows. Immediate patching is critical to prevent credential theft.
CVE-2026-10520 and CVE-2026-42271 (high severity) enable the PoeLLM botnet to compromise AI and development servers for cryptomining. Immediate patching is critical to prevent further exploitation.
CVE-2026-48294 (high severity) enables attackers to access WhatsApp Web chats via the Adobe Acrobat PDF Chrome extension. Patch to version 26.5.2.3 immediately.