Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
286 articles
CVE-2026-15409 and CVE-2026-15410 (critical) allow remote attackers to gain root access on SonicWall SMA 1000 series appliances. Patch as soon as updates are available.
CVE-2026-42533 is a critical heap buffer overflow in NGINX enabling remote code execution and denial of service. Patch all affected servers by July 15, 2026.
CVE-2008-4128 and CVE-2018-0171 are high-severity Cisco router vulnerabilities exploited for remote code execution; patch immediately to prevent compromise.
CVE-2026-58644 is a critical SharePoint vulnerability enabling remote code execution, now under active exploitation. Immediate patching is mandated by CISA.
CVE-2025-40948, CVE-2025-40947, and CVE-2025-40949 are critical zero-days in Siemens ROX II OT switches enabling root access; patch immediately or isolate affected devices.
CVE-2026-39987 and CVE-2026-41176 (high severity) are exploited by the NadMesh botnet to steal cloud credentials and Kubernetes tokens from exposed AI services. Immediate patching is critical to prevent unauthorized infrastructure access.
CVE-2026-59208 is a high-severity flaw in n8n’s Enterprise token exchange, allowing attackers to impersonate users across trusted issuers. Patch released June 24, 2026.
CVE-2026-20296, CVE-2026-20297, CVE-2026-20298, and CVE-2026-53412 are critical flaws in Splunk and Zoom, enabling credential theft and account takeover. Immediate patching is required.
CVE-2026-6875 is a critical unauthenticated remote code execution vulnerability in ServiceNow’s AI platform. Immediate patching is required to prevent exploitation.
CVE-2026-15409 and CVE-2026-15410 are critical zero-days in SonicWall SMA 1000, enabling admin-level command execution and SSRF. Patching is mandatory and urgent.
CVE-2026-44747 is a critical (CVSS 9.9) out-of-bounds write vulnerability in SAP NetWeaver Application Server ABAP, patched in July 2026. Immediate patching is required to prevent memory corruption and potential data breaches.
CVE-2026-56164 and CVE-2026-56155 are critical Microsoft zero-days under active attack, enabling privilege escalation in SharePoint Server and AD FS. Immediate patching is mandatory due to confirmed exploitation.