Vulnerabilities
The vulnerability can be exploited remotely, without authentication, to circumvent existing authentication controls.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
Vulnerabilities
The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs.
Cybercrime
Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.
Vulnerabilities
Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.
Vulnerabilities
Google paid over $3.7 million for Chrome vulnerabilities, and more than $3.5 million for cloud security defects.
Vulnerabilities
The flaws can be exploited to manipulate data and bypass security restrictions, potentially leading to code execution.
Vulnerabilities
The issue allows attackers to inject SQL queries and extract sensitive information from the database.
Vulnerabilities
Critical- and high-severity flaws could be exploited to execute arbitrary shell commands or elevate privileges.
Vulnerabilities
The security defects could lead to denial-of-service (DoS) conditions, command execution, or device takeover.
Vulnerabilities
The bugs allowed unauthenticated attackers to execute arbitrary code, steal credentials, and take over servers.
Vulnerabilities
The bugs could lead to arbitrary code execution, privilege escalation, or authentication rate-limit bypass.
Vulnerabilities
Microsoft has fixed a critical vulnerability, but none of the flaws fixed this Patch Tuesday has been exploited in the wild.
Vulnerabilities
Adobe has rolled out patches for 80 vulnerabilities across 8 products, including Commerce, Illustrator, Acrobat Reader, and Premiere Pro.
Vulnerabilities
A code injection bug in FS-QUO and an insecure deserialization flaw in NetWeaver could lead to arbitrary code execution.
Vulnerabilities
CISA has added the high-severity authentication bypass vulnerability to its KEV list, along with SolarWinds and Workspace One bugs.
Vulnerabilities
WatchTowr reports seeing exploitation attempts for CVE-2026-20127 from numerous unique IP addresses.
Vulnerabilities
The nation-state-grade iOS exploit kit targets 23 vulnerabilities affecting iOS 13 to 17.2.1.
ICS/OT
The vulnerability was disclosed and mitigated in 2021 but its in-the-wild exploitation has only now come to light.
Vulnerabilities
Less than half of the total zero-days have been attributed to a threat actor, but spyware vendors and China are in the lead.
Vulnerabilities
The networking giant has added the recently patched CVE-2026-20128 and CVE-2026-20122 to the list of exploited vulnerabilities.
Vulnerabilities
Cisco has rolled out patches for 48 vulnerabilities in Firewall ASA, Secure FMC, and Secure FTD products.
Vulnerabilities
A patch bypass for an authenticated code execution bug, the flaw leads to zero-click remote code execution attacks.
Vulnerabilities
The recently patched CVE-2026-22719 can be exploited by an unauthenticated attacker for remote code execution.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
(Joshua Goldfarb)