Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
171 articles
CVE-2017-17215, CVE-2025-29635, CVE-2024-1781, and CVE-2018-8007 (high severity) are being actively exploited by the RustDuck botnet to hijack routers and servers for DDoS attacks. Immediate patching is critical to prevent device compromise.
CVE-2026-8451 is a high-severity memory overread flaw in Citrix NetScaler appliances, confirmed exploited within 24 hours of patch release. Immediate patching is required to prevent device compromise.
CVE-2026-6682 and six related high-severity flaws in FatFs allow memory corruption and code execution on embedded devices. No upstream patches are available; downstream vendors must act immediately.
CVE-2026-55200 and related critical CVEs impact Libssh2, Linux kernel, and major open-source projects, enabling remote code execution and privilege escalation. Immediate patching is mandatory; some vulnerabilities remain unpatched and are under active exploitation.
CVE-2026-14191 (high severity) enables remote code execution in WinRAR via crafted .rev files. Patch to version 7.23 immediately; no auto-update available.
CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-49975, and CVE-2026-13474 are high-severity flaws in Citrix NetScaler ADC and Gateway. Immediate patching is required to prevent denial-of-service and information disclosure.
CVE-2026-8037 is a critical pre-auth remote code execution flaw in Progress Kemp LoadMaster under active exploitation. Patch immediately to prevent compromise.
CVE-2026-46817 is a critical, actively exploited flaw in Oracle E-Business Suite Payments (CVSS 9.8) enabling unauthenticated system takeover. Patch immediately if not already applied.
CVE-2026-8037 is a critical pre-auth remote code execution flaw in Progress Kemp LoadMaster, enabling root access via API. Patch immediately to eliminate risk.
CVE-2026-12569 is a critical, actively exploited vulnerability in PTC Windchill and FlexPLM enabling unauthenticated remote code execution. Patch immediately; exploitation confirmed in the wild as of June 18, 2026.
CVE-2026-46331 is a critical Linux kernel vulnerability enabling local root privilege escalation via act_pedit. Patch immediately; public exploit exists.
CVE-2026-46331 is a critical Linux kernel vulnerability enabling local root escalation via act_pedit COW cache poisoning. Patch immediately to prevent undetected root compromise.