Vulnerabilities Surfshark Exposed an Internal Test Server. Hackers Got the Build SecretsSeptember 11, 2026September 11, 20264 mins
Vulnerabilities AdaptHealth Lost Data on 4.1 Million People After a CyberattackSeptember 11, 20264 mins
Vulnerabilities Veradigm Was Hit Through a Vendor. Patient Data Left Through an APISeptember 11, 20264 mins
Vulnerabilities GitLab Has a CVSS 10 Path Traversal. Anonymous Attackers Can Read Server FilesSeptember 11, 20263 mins
Vulnerabilities Casdoor Has a CVSS 9.9 Cross-Tenant Bypass. One Admin Can Cross the WallSeptember 11, 2026September 11, 20265 mins
Vulnerabilities Secure Boot Can Be Bypassed From UEFI Shell. The OS Never Gets a ChanceSeptember 11, 20266 mins
Vulnerabilities Cisco IOS XR Has Two CVSS 9.8 Bugs. No Login RequiredSeptember 11, 2026September 11, 20264 mins
Vulnerabilities TerminalFix Turns Fake CAPTCHA Into a Windows BackdoorSeptember 11, 2026September 11, 20264 mins
Vulnerabilities Adobe Acrobat Has Two Fresh RCE Bugs. A Malicious PDF Is EnoughSeptember 11, 2026September 11, 20264 mins
Vulnerabilities Photoshop Just Got Hit by Multiple Critical RCE BugsSeptember 11, 2026September 11, 20264 mins
Vulnerabilities 153 Million Driver’s Licenses Hit the Dark Web. FBI Is InvestigatingSeptember 11, 20265 mins
Vulnerabilities ONLYOFFICE ownCloud Plugin Has an SSRF Hole. Your Server Can Scan the NetworkSeptember 11, 2026September 11, 20264 mins
Vulnerabilities Skullcandy Dime 3 Lets Strangers Pair and Listen to Your MicrophoneSeptember 11, 2026September 11, 20264 mins
Vulnerabilities Two WordPress Plugins Are Being Hit With 440,000 Exploit AttemptsSeptember 10, 20264 mins
Vulnerabilities libXfont2 Has a Heap Overflow. A Malicious Font Server Can Reach the X ServerSeptember 10, 2026September 10, 20264 mins
Vulnerabilities Chrome 153 Just Got 230 Security Fixes. The GPU Stack Is Getting UglySeptember 10, 2026September 10, 20264 mins
Vulnerabilities Postgres MCP Server Turns Read-Only SQL Into OS Command ExecutionSeptember 10, 2026September 10, 20264 mins
Vulnerabilities MaxSite CMS Ships With the Same Secret. Attackers Can Forge Admin SessionsSeptember 10, 20264 mins
Vulnerabilities Akana Has a CVSS 10 RCE. The Authentication Filter Can Be BypassedSeptember 10, 20264 mins
Vulnerabilities Oracle Outside In Has Three Fresh RCEs. Legacy File Parsers Are the DoorSeptember 10, 20264 mins
Vulnerabilities FortiSandbox Has a Command Injection. Malware Analysis Can Become RCESeptember 10, 20264 mins
Vulnerabilities Dell Secure Connect Gateway Has a Path Traversal That Can Reach RCESeptember 10, 2026September 10, 20263 mins
Vulnerabilities WatchGuard Firebox Has a 9.3 RCE. The Old Mobile Security Service Is the DoorSeptember 10, 20263 mins
Vulnerabilities Pandora Has a 9.3 Path Traversal. Your Malware Analyzer Can Write Outside Its SandboxSeptember 10, 20265 mins
Vulnerabilities Flowise Turns Prompt Injection Into RCE. The CSV Agent Is the WeaponSeptember 10, 20263 mins
Vulnerabilities Velociraptor Has a 9.9 Permission Bypass. Investigators Can Run BashSeptember 10, 2026September 10, 20264 mins
Vulnerabilities Kemp LoadMaster Has a Pre-Auth RCE. Four Quotes Can Open a Root ShellSeptember 10, 20264 mins
Vulnerabilities Windows Cloud Files Has a Kernel Bug. One App Can Reach Higher PrivilegesSeptember 10, 2026September 10, 20264 mins
Vulnerabilities FortiGate Is Being Turned Into a RAT. PivotC2 Is Exploiting an Old RCESeptember 10, 2026September 10, 20264 mins
Vulnerabilities Open WebUI Has an Account Takeover Bug. The Admin Session Can Be YoursSeptember 10, 20263 mins
Vulnerabilities Cisco’s Firewall Manager Is Being Hacked. CVSS 10.0 Gives Attackers RootSeptember 10, 20263 mins
Vulnerabilities Eclipse aeriOS Ships With Default Credentials and a 9.9 Security FlawSeptember 9, 20263 mins
Vulnerabilities Google ADK Has a CVSS 10 RCE. AI Agents Are the Attack SurfaceSeptember 9, 20263 mins
Vulnerabilities Skype for Business Has a 9.8 RCE. No Login RequiredSeptember 9, 2026September 9, 20263 mins
Vulnerabilities Windows ICS Has a 9.8 RCE. Internet Connection Sharing Just Got InterestingSeptember 9, 2026September 9, 20263 mins
Vulnerabilities Windows Failover Cluster Has a 9.8 RCE. Clusters Are Not Safe by DefaultSeptember 9, 20263 mins
Vulnerabilities Windows Imaging Has a 9.8 RCE. No Login, No ClickSeptember 9, 2026September 9, 20263 mins
Vulnerabilities Windows DNS Has a 9.8 RCE. This Looks Like SigRed AgainSeptember 9, 2026September 9, 20263 mins
Vulnerabilities DeepSeek’s AI Agent Can Disable Its Own SandboxSeptember 9, 2026September 9, 20265 mins
Vulnerabilities Apache Nutch Has an Unauthenticated RCE. The REST API Is the DoorSeptember 9, 2026September 9, 20264 mins
Vulnerabilities Ivanti Neurons Has a 9.9 RCE. A Low-Privilege Account Is EnoughSeptember 9, 2026September 9, 20264 mins
Vulnerabilities Slim Spider Is Hunting Cloud Credentials Inside Brazilian BanksSeptember 9, 20264 mins
Vulnerabilities Microsoft RDP Client Has an 8.8 RCE. The Victim Does Not Need to ClickSeptember 9, 20264 mins
Vulnerabilities One cPanel Mail Account Can Become Root on the Entire ServerSeptember 9, 2026September 9, 20264 mins
Vulnerabilities Microsoft Patched ShieldBreak. Six Hours Later, ShieldCrash Broke the FixSeptember 9, 20264 mins
