Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
228 articles
CVE-2026-63078 is a high-severity zero-day in Apache Traffic Server enabling response queue poisoning and cross-user data leaks. Patch immediately; exploit risk is high.
CVE-2026-56164 and CVE-2026-50522 are high-severity Microsoft SharePoint vulnerabilities exploited in July 2026 to compromise 200 Swiss government accounts. Immediate patching is mandatory.
CVE-2026-18830, CVE-2026-18236, CVE-2026-64650, and CVE-2026-64651 are high-severity flaws in AWS, Google, and Vercel agent SDKs allowing attackers to trigger tool execution without model invocation. Patches released mid-2026; immediate update required.
CVE-2026-63077 is a critical, actively exploited remote code execution flaw in JetBrains TeamCity on-premise servers. Immediate patching is required to prevent compromise of CI/CD pipelines.
CVE-2026-18577 is a high-severity authentication bypass flaw in N-able N-central, actively exploited to compromise customer environments. Immediate patching is critical to prevent admin takeover and lateral movement.
CVE-2026-15409 and CVE-2026-15410 are critical SonicWall SMA 1000 zero-days exploited by INC Ransomware for privileged access and multi-channel extortion. Immediate patching is mandatory.
CVE-2026-50522 is a high-severity Microsoft SharePoint vulnerability exploited in July 2026 to compromise 200 Swiss federal IT accounts. Patch immediately to prevent further breaches.
CVE-2026-58048 is a critical flaw in cPanel allowing authenticated users to execute SQL as database root. Patch immediately to prevent OS-level compromise.
CVE-2026-18577 (high severity) enables remote admin access to N-able N-central servers via authentication bypass; patch to build 2026.3.1.7 is mandatory to prevent persistent compromise.
CVE-2026-15409 and CVE-2026-15410 are critical SonicWall SMA1000 zero-days enabling root access and ransomware deployment; patch released July 14, 2026.
CVE-2026-47876 (critical) enables VM escape on VMware ESXi, allowing local VM admins to execute code on the host. Patch immediately to prevent host takeover.
CVE-2026-59726 is a critical unauthenticated remote code execution flaw in Ruflo's AI agent orchestration platform. All self-hosted instances exposing port 3001 are at risk; immediate patching is mandatory.