Technology ❯ Cybersecurity ❯ Threats

Exploitation

Remote Code Execution Privilege Escalation Unauthorized Access Remote Attacks Zero-Day Vulnerabilities Remote Access CVE-2026-41940 Palo Alto Networks AI-enabled Adversaries Code Injection

Undocumented Backdoor Found in Multiple Tenda Router Firmware

A hidden password can bypass login checks, leaving devices exposed until vendor firmware is released.

CISA Orders Emergency Patching After Active Exploitation of Adobe ColdFusion Flaw

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Langflow Path Traversal Flaw Exploited to Write Files

ServiceNow Fixes API Misconfiguration After Attackers Queried Customer Instances

Critical Check Point VPN Flaw Exploited by Ransomware-Linked Attackers

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Belgium Says Critical Windows Netlogon Flaw Is Being Actively Exploited

Active Exploits Hit Drupal SQL Injection Flaw CVE-2026-9082

Microsoft Issues Emergency Patches for Two Actively Exploited Defender Zero‑Days

Hackers Exploit Critical 'Nginx Rift' Bug as Fixes Ship

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

cPanel Zero-Day Drives Ongoing Exploits as CISA Demands Fast Patching

CISA Adds ActiveMQ RCE to KEV With April 30 Patch Deadline

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

Fortinet Rushes Hotfix as FortiClient EMS Zero-Day Sees Active Exploitation

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Fortinet FortiClient EMS CVE-2026-21643 Now Under Active Exploitation