Skip to content

BugsToday – Zero-Days, Exploits & Vulnerabilities

Today's Bugs. Tomorrow's Breaches.

BugsToday – Zero-Days, Exploits & Vulnerabilities

Today's Bugs. Tomorrow's Breaches.

August 2026

167 posts
Kaspersky Endpoint Security Got a Public Privilege-Escalation PoC
  • Vulnerabilities

Kaspersky Endpoint Security Got a Public Privilege-Escalation PoC

August 31, 2026August 31, 2026
5 mins
Tenda AC1206 Has a Critical Auth Bypass — And the Exploit Is Already Public
  • Vulnerabilities

Tenda AC1206 Has a Critical Auth Bypass — And the Exploit Is Already Public

August 31, 2026August 31, 2026
5 mins
AI Agents Found a JFrog Zero-Day and Poisoned the Container Supply Chain
  • Vulnerabilities

AI Agents Found a JFrog Zero-Day and Poisoned the Container Supply Chain

August 31, 2026August 31, 2026
6 mins
Chinese Hackers Turned Cisco Routers Into Spy Platforms
  • Vulnerabilities

Chinese Hackers Turned Cisco Routers Into Spy Platforms

August 31, 2026
5 mins
PaperCut’s Zero-Days Were Already Being Exploited — Then Attackers Broke the Fix
  • Vulnerabilities

PaperCut’s Zero-Days Were Already Being Exploited — Then Attackers Broke the Fix

August 31, 2026
5 mins
OpenZFS Bug Lets Unprivileged Users Punch Through the Sandbox
  • Vulnerabilities

OpenZFS Bug Lets Unprivileged Users Punch Through the Sandbox

August 31, 2026
4 mins
GNU Emacs Could Execute Code Just by Opening the Wrong File
  • Vulnerabilities

GNU Emacs Could Execute Code Just by Opening the Wrong File

August 31, 2026August 31, 2026
4 mins
Hulumi’s AWS Policy Bug Can Break the GitHub OIDC Trust Model
  • Vulnerabilities

Hulumi’s AWS Policy Bug Can Break the GitHub OIDC Trust Model

August 31, 2026
5 mins
OpenClaw Will Execute Extensions You Never Explicitly Trusted
  • Vulnerabilities

OpenClaw Will Execute Extensions You Never Explicitly Trusted

August 31, 2026August 31, 2026
4 mins
OpenClaw’s iMessage Pipeline Had a Remote Command Injection
  • Vulnerabilities

OpenClaw’s iMessage Pipeline Had a Remote Command Injection

August 31, 2026
4 mins
Kata Containers Bug Lets Containers Escape Their Cage
  • Vulnerabilities

Kata Containers Bug Lets Containers Escape Their Cage

August 31, 2026
4 mins
OpenRGB Bug Lets Attackers Break Out of the Sandbox
  • Vulnerabilities

OpenRGB Bug Lets Attackers Break Out of the Sandbox

August 31, 2026
4 mins
Blind Eagle’s Malware Operator Got Hacked — Researchers Found His Arsenal
  • Vulnerabilities

Blind Eagle’s Malware Operator Got Hacked — Researchers Found His Arsenal

August 31, 2026August 31, 2026
5 mins
Debt Relief Phishing Campaign Turns Phone Calls Into Data Theft
  • Vulnerabilities

Debt Relief Phishing Campaign Turns Phone Calls Into Data Theft

August 31, 2026
5 mins
AI Apple Support Calls Are Now Helping Thieves Unlock Stolen iPhones
  • Vulnerabilities

AI Apple Support Calls Are Now Helping Thieves Unlock Stolen iPhones

August 31, 2026
5 mins
Encryption Became the Prompt Injection
  • Vulnerabilities

Encryption Became the Prompt Injection

August 31, 2026
5 mins
Amazon Kiro Can Leak Your Files Just Because You Opened a Project
  • Vulnerabilities

Amazon Kiro Can Leak Your Files Just Because You Opened a Project

August 31, 2026August 31, 2026
5 mins
KryBit Ransomware Got Hacked — Then Hacked Its Rival Back
  • Vulnerabilities

KryBit Ransomware Got Hacked — Then Hacked Its Rival Back

August 31, 2026August 31, 2026
4 mins
Spring Ring Turns Microsoft Teams Into a Vishing Weapon
  • Vulnerabilities

Spring Ring Turns Microsoft Teams Into a Vishing Weapon

August 31, 2026
5 mins
AI Agents Trusted llms.txt — Then Installed Code Nobody Owned
  • Vulnerabilities

AI Agents Trusted llms.txt — Then Installed Code Nobody Owned

August 31, 2026
5 mins
A Hacker Wiped Secret Neighbor Players — Then Demanded the Game Disappear
  • Vulnerabilities

A Hacker Wiped Secret Neighbor Players — Then Demanded the Game Disappear

August 31, 2026August 31, 2026
5 mins
Shai-Hulud Is Back — A Trusted npm Package Turned Into a Credential-Stealing Worm
  • Vulnerabilities

Shai-Hulud Is Back — A Trusted npm Package Turned Into a Credential-Stealing Worm

August 31, 2026
5 mins
FulcrumSec Claims 86 GB Stolen From Manchester Airports Group
  • Vulnerabilities

FulcrumSec Claims 86 GB Stolen From Manchester Airports Group

August 31, 2026
5 mins
TerminalFix Turns a Fake CAPTCHA Into a Corporate Network Tunnel
  • Vulnerabilities

TerminalFix Turns a Fake CAPTCHA Into a Corporate Network Tunnel

August 31, 2026August 31, 2026
4 mins
Steam’s 12 TB Teraleak Exposes a Decade of PC Gaming History
  • Vulnerabilities

Steam’s 12 TB Teraleak Exposes a Decade of PC Gaming History

August 31, 2026August 31, 2026
5 mins
Rails 9.5 Bug Is Being Exploited — And It Can Lead to RCE
  • Vulnerabilities

Rails 9.5 Bug Is Being Exploited — And It Can Lead to RCE

August 31, 2026
4 mins
Hackers Got Hacked — An Infostealer Exposed Blind Eagle’s Entire Arsenal
  • Vulnerabilities

Hackers Got Hacked — An Infostealer Exposed Blind Eagle’s Entire Arsenal

August 31, 2026August 31, 2026
6 mins
One Malicious Website Can Poison NVIDIA NemoClaw’s AI Agent
  • Vulnerabilities

One Malicious Website Can Poison NVIDIA NemoClaw’s AI Agent

August 31, 2026
4 mins
D-Link Router Flaws Let Local Attackers Reset Admin Passwords and Steal Wi-Fi Credentials
  • Vulnerabilities

D-Link Router Flaws Let Local Attackers Reset Admin Passwords and Steal Wi-Fi Credentials

August 31, 2026
5 mins
AI Shopping Assistant Turned Into a Backend RCE
  • Vulnerabilities

AI Shopping Assistant Turned Into a Backend RCE

August 31, 2026August 31, 2026
5 mins
Magecart Put Its Skimmer on Ethereum — 40+ Stores Were Hit
  • Vulnerabilities

Magecart Put Its Skimmer on Ethereum — 40+ Stores Were Hit

August 31, 2026
6 mins
Gryxa Malware Watches Defenders Remove It — Then Fights Back
  • Vulnerabilities

Gryxa Malware Watches Defenders Remove It — Then Fights Back

August 31, 2026August 31, 2026
5 mins
Composer Dependency Bug Can Expose Files Outside the Project
  • Vulnerabilities

Composer Dependency Bug Can Expose Files Outside the Project

August 31, 2026
4 mins
One cPanel Customer Can Take Root Over the Entire Hosting Server
  • Vulnerabilities

One cPanel Customer Can Take Root Over the Entire Hosting Server

August 31, 2026August 31, 2026
4 mins
D-Link DIR-825M Has a 9.9 Router Flaw — And the Exploit Is Already Public
  • Vulnerabilities

D-Link DIR-825M Has a 9.9 Router Flaw — And the Exploit Is Already Public

August 31, 2026August 31, 2026
5 mins
Hackers Are Stealing Claude Sessions and Burning Through Paid AI Usage
  • Vulnerabilities

Hackers Are Stealing Claude Sessions and Burning Through Paid AI Usage

August 31, 2026August 31, 2026
5 mins
Water-Sector Supplier Breach Triggers FBI Scrutiny as Attacks Escalate
  • Vulnerabilities

Water-Sector Supplier Breach Triggers FBI Scrutiny as Attacks Escalate

August 31, 2026
4 mins
N-able Patched an MSP “God Mode” Bug. The First Fix Wasn’t Enough
  • Vulnerabilities

N-able Patched an MSP “God Mode” Bug. The First Fix Wasn’t Enough

August 31, 2026August 31, 2026
5 mins
Microsoft Dropped a CVSS 10 Entra ID RCE — Then Changed Its Mind About Exploitation
  • Vulnerabilities

Microsoft Dropped a CVSS 10 Entra ID RCE — Then Changed Its Mind About Exploitation

August 31, 2026August 31, 2026
5 mins
Microsoft’s AI Framework Can Let Hackers Control Android Devices Without a Login
  • Vulnerabilities

Microsoft’s AI Framework Can Let Hackers Control Android Devices Without a Login

August 31, 2026August 31, 2026
4 mins
Ubiquiti Just Patched Three Maximum-Severity UniFi Bugs
  • Vulnerabilities

Ubiquiti Just Patched Three Maximum-Severity UniFi Bugs

August 30, 2026
4 mins
Magento Has a Critical Account Takeover Bug. Attackers Are Already Trying It
  • Vulnerabilities

Magento Has a Critical Account Takeover Bug. Attackers Are Already Trying It

August 30, 2026
4 mins
Fake Cloudflare CAPTCHA Drops a Reverse Tunnel Inside Windows Networks
  • Vulnerabilities

Fake Cloudflare CAPTCHA Drops a Reverse Tunnel Inside Windows Networks

August 30, 2026
4 mins
SAP Commerce Cloud Has a CVSS 10 RCE — Attackers Moved in Three Days
  • Vulnerabilities

SAP Commerce Cloud Has a CVSS 10 RCE — Attackers Moved in Three Days

August 30, 2026
4 mins
Microsoft Copilot Was Tricked Into Stealing Its User’s Data
  • Vulnerabilities

Microsoft Copilot Was Tricked Into Stealing Its User’s Data

August 30, 2026
5 mins
Next.js Has Two Critical RCE Bugs — One Comes With a Public PoC
  • Vulnerabilities

Next.js Has Two Critical RCE Bugs — One Comes With a Public PoC

August 30, 2026
8 mins
JFrog Artifactory Just Entered CISA’s KEV List — After AI Agents Exploited It
  • Vulnerabilities

JFrog Artifactory Just Entered CISA’s KEV List — After AI Agents Exploited It

August 30, 2026
8 mins
The Fake GTA 6 Demo Is a Password Thief
  • Vulnerabilities

The Fake GTA 6 Demo Is a Password Thief

August 30, 2026
8 mins
WordPress Plugin Rest Routes Has an Unauthenticated SQL Injection
  • Vulnerabilities

WordPress Plugin Rest Routes Has an Unauthenticated SQL Injection

August 30, 2026
8 mins
THIS WEEK IN BUGS: THE PATCH WAS NEVER THE WHOLE STORY
  • Weekly

THIS WEEK IN BUGS: THE PATCH WAS NEVER THE WHOLE STORY

August 29, 2026September 6, 2026
3 mins
ShinyHunters Claims Another Hit — Jack Henry Data Allegedly Stolen
  • Vulnerabilities

ShinyHunters Claims Another Hit — Jack Henry Data Allegedly Stolen

August 29, 2026
7 mins
ShinyHunters Claims a Massive McKesson Breach — 284 Million Records Allegedly Exposed
  • Vulnerabilities

ShinyHunters Claims a Massive McKesson Breach — 284 Million Records Allegedly Exposed

August 29, 2026
8 mins
GiveWP Has a CVSS 10 RCE — 100,000 WordPress Sites Are in the Blast Radius
  • Vulnerabilities

GiveWP Has a CVSS 10 RCE — 100,000 WordPress Sites Are in the Blast Radius

August 29, 2026
6 mins
TeamViewer on Linux Can Be Turned Into a Remote Command Shell
  • Vulnerabilities

TeamViewer on Linux Can Be Turned Into a Remote Command Shell

August 29, 2026
7 mins
Cl0p Turned Windchill Into a Data-Theft Machine
  • Vulnerabilities

Cl0p Turned Windchill Into a Data-Theft Machine

August 29, 2026
8 mins
A 2019 SQL Server Bug Is Still Getting Exploited
  • Vulnerabilities

A 2019 SQL Server Bug Is Still Getting Exploited

August 29, 2026August 29, 2026
8 mins
Most “AI Malware” Isn’t Actually Hitting Anyone
  • Vulnerabilities

Most “AI Malware” Isn’t Actually Hitting Anyone

August 29, 2026
8 mins
Hackers Turned Cursor AI Into an Attack Tool
  • Vulnerabilities

Hackers Turned Cursor AI Into an Attack Tool

August 29, 2026August 29, 2026
8 mins
Rhysida Wants 30 Bitcoin for Berlin’s Stolen Data
  • Vulnerabilities

Rhysida Wants 30 Bitcoin for Berlin’s Stolen Data

August 29, 2026
7 mins
Citrix NetScaler Bug Escalates Into Unauthenticated RCE
  • Vulnerabilities

Citrix NetScaler Bug Escalates Into Unauthenticated RCE

August 29, 2026
7 mins

Posts navigation

Older posts

BugsToday – Zero-Days, Exploits & Vulnerabilities

Today's Bugs. Tomorrow's Breaches.

© 2026 Bugstoday™ — Independent Cybersecurity & Technology Publication.