Technology ❯ Information Security ❯ Threats

Exploitation

Privilege Escalation CVE-2026-3854 Proof-of-Concept (PoC) Remote Code Execution CVE-2026-42897 Unauthorized Access Arbitrary Code Execution

Microsoft Confirms Entra ID Deserialization Flaw CVE-2026-69836 Was Exploited

Microsoft says the maximum‑severity remote code execution bug has been fully mitigated with no customer action required.

Six U‑Boot Flaws Let Malicious Boot Images Crash Devices or Run Code

CISA Flags Two-Year-Old Oracle WebLogic Flaw as Actively Exploited

Microsoft Says Exchange OWA Flaw Is Under Active Attack, Rolls Out Auto Mitigation

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

WordPress Modular DS Flaw Under Active Attack as Patch Ships to Block Admin Takeovers