Technology ❯ Cybersecurity ❯ Vulnerabilities

Zero-Day Vulnerabilities

Microsoft Security Updates Exploitation Techniques Microsoft Privilege Escalation Apple Security Updates SonicWall SMA1000 CVE-2026-20700 Exploitation CVE-2026-20245 Fortinet FortiWeb CVE-2025-53690 Palo Alto Networks BlueHammer Exploited Vulnerabilities Remote Code Execution Windows Remote Access Connection Manager CVE-2026-21533 Google Chrome Update CVE-2025-21333 Exploitation Trends CVE-2025-10585 CVE-2026-22769 CVE-2025-24201 CVE-2026-11645 Citrix NetScaler CVE-2024-43572 SonicWall CVE-2025-59689 Microsoft Exchange Server Gogs RCE Vulnerability Exploitation of Zero-Day Vulnerabilities CVE-2025-11371 SonicWall Products CVE-2026-24858 Software Security Path Traversal Bugs CVE-2026-0300 CVE-2026-35616 CVE-2025-20393 Microsoft SharePoint CVE-2024-38475 Microsoft Patches Google Chrome Security VPN Software CVE-2026-6973 Prompt Injection CVE-2026-21510 CVE-2023-21529 NTLM Credentials Theft CVE-2025-48595 Trend Micro Apex One Publicly Disclosed Flaws WebKit AI in Cybersecurity Microsoft Office Information Disclosure CVE-2025-61757 Linux Kernel Vulnerabilities CVE-2024-40766 CVE-2024-39717 Path Traversal Vulnerability Project Glasswing Oracle E-Business Suite SAP Google Chrome CVE-2023-32434 CVE-2025-61882 Active Exploits CVE-2026-42897 CVE-2025-8110 Sitecore Vulnerability Pwn2Own Microsoft Products CVE-2025-53770 CVE-2025-24990 Microsoft Defender CVE-2026-21513 SonicWall SSL VPN Cisco AsyncOS RoguePlanet BitLocker Bypass WinRAR CVE-2025-8088 WebKit Exploits Common Vulnerability Scoring System CVE-2025-64671 CVE-2026-20127 Samsung Devices CVE-2025-2783 Exploit Development Cisco Firewall Vulnerability CVE-2026-20182 RedSun Android Security CVE-2025-22224 VMware Vulnerabilities CVE-2024-49138 Sitecore CVE-2026-50751 Cisco SD-WAN Microsoft Windows

Cisco Says Zero‑Day Static‑Credential Flaw in Firewall Manager Is Being Exploited

Built‑in static credentials allow unauthenticated logins that can be chained to elevate privileges on managed FMC systems.

SonicWall SMA1000 Zero-Days Exploited Before Patch, Custom Malware Deployed

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

Progress Issues Patch After Zero-Day Forces ShareFile Storage Zone Shutdown

Progress Orders ShareFile Customers to Power Down Internet-Facing Storage Zone Controllers

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

ShinyHunters Exploit Oracle PeopleSoft Zero-Day to Breach Universities

Google Releases Emergency Chrome 149 Patch for Actively Exploited V8 Zero‑Day

Critical Check Point VPN Flaw Exploited by Ransomware-Linked Attackers

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

VS Code Zero-Day Lets Attackers Steal Full GitHub OAuth Tokens

Google Releases June Android Patches Fixing Actively Exploited Zero‑Day

Critical Zero-Day in Gogs Lets Authenticated Users Run Remote Code

CISA Adds Langflow and Trend Micro Apex One to KEV After Active Exploitation

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

Pwn2Own Berlin Uncovers 47 Zero‑Days, Awards $1.3 Million

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

Researcher Publishes YellowKey BitLocker Bypass and GreenPlasma Windows Exploit PoCs

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182