Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.
Vulnerabilities
The security defect is described as an SQL injection that could allow attackers to achieve remote code execution.
Vulnerabilities
The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.
Vulnerabilities
Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code.
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.
Vulnerabilities
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.
Vulnerabilities
The security defect allows unauthenticated, remote attackers to gain administrative access to Metabase instances.
Vulnerabilities
The critical-severity flaw allows unauthenticated, remote attackers to execute arbitrary commands.
Vulnerabilities
The flaws can be exploited for remote code execution, authentication bypass, and EncryptInterceptor bypass.
Vulnerabilities
The N‑central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.
Ransomware
The INC Ransomware gang has been targeting vulnerable SMA1000 appliances for root access and lateral movement.
Vulnerabilities
The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.
Artificial Intelligence
The OpenAI models targeted services beyond Hugging Face as they attempted to solve the tasks they were given.
Vulnerabilities
The critical remote code execution bug can be exploited without authentication, under the library’s stock default configurations.
Vulnerabilities
Impacting on-premises deployments, the OS command injection allows attackers to access privileged internal functionality.
Ransomware
The critical unsafe deserialization flaw allows attackers to execute arbitrary code remotely, without authentication.
Vulnerabilities
The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations.
Mobile & Wireless
The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data.
Artificial Intelligence
Vulnerabilities
Supply Chain Security
Data Breaches
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
