Technology ❯ Cybersecurity ❯ Vulnerabilities

CVE

Remote Code Execution CVE-2023-39780 CVE-2025-31277 CVE-2026-63077 CVE-2026-3833 CVE-2024-43047 SolarWinds Web Help Desk Mozilla CVE-2023-6317 CVE-2023-6318 CVE-2025-30401 MITRE Corp CVE Foundation CVE-2021-20038 Oracle Identity Manager CVE-2025-26673 Cooperation CVE-2025-55182 CVE-2024-51978 Kernel Vulnerabilities CVE-2026-53583 Security Updates Linux Kernel D-Link DNR-322L Vulnerability CVE-2026-9672 D-Link Devices Exploits CVE-2025-53859 Exploitations CVE-2025-48572 CVE-2025-26399 CVE-2025-10585 Sudo Command CVE-2025-9231 CVE-2025-59489 CVE-2025-9230 PHP Servers CVE-2025-43400 React CVE-2025-9232 CVE-2025-11065 Exploitation CVE-2025-61884 Active Exploitation CVE-2026-1940 CVE-2025-62221 Patch Tuesday Cisco CVE-2025-26625 CVE-2025-11021 CVE-2026-73570 CVE-2026-34352 CVE-2013-3307 CVE-2007-3010 CVE-2025-69258 CVE-2019-6260 CVE-2013-4782 SolarWinds WHD WatchGuard Firebox CVE-2014-2955 CVE-2025-10294 Zero-Day Exploits Vulnerability Disclosure CISA CVE-2026-46601 OpenSSL CVE-2026-15826 CVE-2025-61728 CVE-2026-87902 CVE-2025-68121 CVE-2025-61726 MCP Access Control Issues CVE-2025-40538 CVE-2025-20701 CVE-2026-60137 NVD Microsoft CVE-2026-4367 CVE-2026-15748 CVE-2026-4046 Packet Validation Kernel Exploits CVE-2026-2297 Affected Components NGINX Exploit Mitigation CVE-2026-25680 Integer Overflow CVE-2026-8732 Input Validation CVE-2026-50195 curl Vulnerabilities CVE-2026-56164 CVE-2026-56155 CVE-2026-59347 Apple Security Fixes IoT Devices Oracle Java SE Vulnerabilities CVE-2026-19311

Critical WordPress File-Inclusion Flaw Patched but Exploited Within Hours

Exploit chains write PHP payloads to disk on servers with vulnerable themes or risky PHP settings, raising immediate risk.

Google Patches Pixel Modem Zero‑Day Exploited in Targeted Attacks

Broadcom Patches Two VM‑Escape Flaws in VMware Workstation and Fusion

SonicWall: Two SMA1000 Zero‑Days Actively Exploited

Factory Implants in Chinese-Made Routers Give Remote Root Access

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

Evooo1Bot Identified as Mirai-Derived Botnet That Turns Edge Devices Into SOCKS5 Proxies

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

Dysphoria Botnet Uses Blockchain Domains and Infected Devices to Hide Command Servers

Critical Unauthenticated RCE Found in TeamCity On‑Premises

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Citrix Patches Six NetScaler Flaws Including High-Severity SAML Memory Bug

AryStinger Malware Hijacks 4,300+ Legacy Routers to Build Reconnaissance and Proxy Fleet

Critical WP Maps Pro Flaw Lets Attackers Create WordPress Admin Accounts

Critical 'NGINX Rift' Bug in Rewrite Module Exposes Servers to Remote Code Execution

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

NIST Limits NVD CVE Enrichment to KEV, Federal Use and Critical Software

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

SolarWinds Releases Serv-U 15.5.4 to Fix Four Critical Remote Code Execution Flaws