Technology ❯ Cybersecurity ❯ Vulnerabilities

CVE

Remote Code Execution CVE-2025-31277 CVE-2023-39780 Security Updates WatchGuard Firebox CVE-2025-26625 Zero-Day Exploits Patch Tuesday CVE-2026-56155 CVE-2026-25680

Dysphoria Botnet Uses Blockchain Name Services and Victim Relays to Hide Controllers

Researchers warn using ENS and SNS records together with a relay-only mesh makes server seizures and attribution much harder.

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Citrix Patches Six NetScaler Flaws Including High-Severity SAML Memory Bug

AryStinger Malware Hijacks 4,300+ Legacy Routers to Build Reconnaissance and Proxy Fleet

Critical WP Maps Pro Flaw Lets Attackers Create WordPress Admin Accounts

Critical 'NGINX Rift' Bug in Rewrite Module Exposes Servers to Remote Code Execution

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

NIST Limits NVD CVE Enrichment to KEV, Federal Use and Critical Software

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

SolarWinds Releases Serv-U 15.5.4 to Fix Four Critical Remote Code Execution Flaws

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

OpenSSL Patches 12 Flaws Found by AISLE in Coordinated January Update

Trend Micro Patches Critical Apex Central RCE as Public Exploits Surface

Fake GitHub Exploits Are Installing Webrat, Security Firms Warn

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

CISA Adds Actively Exploited WinRAR and Windows Flaws to KEV, Sets Dec. 30 Deadline

Cloudflare Restores Service After Brief Global Outage Tied to React Security Mitigation

Exploit Emerges for Critical React RCE as AWS Flags First Attacks

React Patches CVSS 10 RCE in Server Components as Cloud Providers Deploy WAF Protections

CISA Adds WatchGuard Firewall Remote Code Execution Flaw to KEV, Sets Dec. 3 Patching Deadline