Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
286 articles
CVE-2021-26855 is a high-severity Microsoft Exchange vulnerability enabling remote code execution. Active exploitation continues; patch immediately to prevent web shell compromise.
CVE-2026-53264 is a high-severity Linux kernel race condition enabling local root escalation; patch all affected systems immediately to prevent exploitation.
CVE-2026-93616, CVE-2026-85102, CVE-2026-93952, and CVE-2026-94127 are critical zero-days enabling pre-auth remote code execution on Check Point and F5 BIG-IP systems. Emergency patching is mandatory.
CVE-2026-53921 is a critical OpenWrt DHCPv6 stack overflow enabling unauthenticated remote code execution as root. Patch immediately; no exploitation reported yet.
CVE-2026-43818, CVE-2026-43776, and related Apple vulnerabilities (high severity) enable remote code execution via malicious images. Immediate patching is critical.
CVE-2026-34908, CVE-2026-34909, CVE-2026-34910, CVE-2026-63030, CVE-2026-60137, CVE-2026-7273, and CVE-2026-60004 are critical vulnerabilities exploited in active attacks since June 2026. Immediate patching is required to prevent further data exfiltration.
CVE-2026-61511 is a critical pre-auth remote code execution flaw in vBulletin (up to 5.7.5/6.2.1) with public exploit code. Patch to v6.2.2 or backports immediately.
CVE-2026-44827, CVE-2026-45804, and CVE-2026-44513 are high-severity flaws in Hugging Face Diffusers enabling arbitrary code execution. Patch to v0.38.0 immediately.
CVE-2026-84869 is a critical, actively exploited flaw in ConnectWise ScreenConnect enabling unauthorized remote code execution; CISA mandates patching within three days.
CVE-2026-58704 is a high-severity modem vulnerability in Google Pixel devices, actively exploited and enabling remote privilege escalation. Immediate patching is critical.
CVE-2026-76461 is a critical zero-day in Cisco Secure Email Gateway enabling unauthenticated root code execution. Exploitation is active; patch immediately.
CVE-2020-0688 (high severity) enables remote code execution on Microsoft Exchange and is actively exploited by NightEagle APT. Patch immediately to prevent persistent compromise.