exploit

Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)

August 13, 2026

A high-severity vulnerability (CVE-2026-20349) is being leveraged by attackers to temporarily interrupt the operation of Cisco firewalls, the company has confirmed. The flaw …

Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)

August 6, 2026

Cisco has fixed a critical vulnerability (CVE-2026-20200) in its Integrated Management Controller (IMC), which allows an attacker to run commands as root through the …

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)

July 27, 2026

Security researchers who discovered and reported CVE-2026-54121 (aka “Certighost”), a critical privilege elevation vulnerability in Active Directory Certificate …

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)

July 9, 2026

Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation …

Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)

July 8, 2026

The US Cybersecurity and Infrastructure Security Agency (CISA) is warning about yet another Langflow vulnerability (CVE-2026-55255) leveraged by attackers in the wild. The …

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)

July 7, 2026

CVE-2026-48282, one of the maximum severity vulnerabilities patched in Adobe ColdFusion on June 30, 2026, has been targeted by attackers in the wild. Exploitation attempts …

Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656)

June 17, 2026

Microsoft has acknowledged the local elevation of privilege issue in Microsoft Defender that can be triggered via the “RoguePlanet” exploit, and is “working …

Attackers are exploiting FortiSandbox vulnerabilities

June 16, 2026

Attackers have been spotted exploiting three vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089) in FortiSandbox, a platform that other Fortinet security products …

Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245)

June 5, 2026

A 0-day privilege escalation vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager that has yet to be patched by Cisco is being leveraged by attackers. “To …

Microsoft provides mitigation for “YellowKey” BitLocker bypass flaw (CVE-2026-45585)

May 20, 2026

Microsoft is working on a fix for CVE-2026-45585 (aka “Yellowkey”), a vulnerability that can be used by attackers to bypass protections offered by BitLocker, the …

Attackers are exploiting critical NGINX vulnerability (CVE-2026-42945)

May 18, 2026

A critical NGINX vulnerability (CVE-2026-42945) disclosed last week is being exploited by attackers, VulnCheck security researcher Patrick Garrity revealed on Saturday. The …

Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300)

May 14, 2026

Researchers have found and disclosed yet another local privilege escalation (LPE) vulnerability in the Linux kernel: CVE-2026-46300, aka “Fragnesia”. The flaw is …