vulnerability

Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)

June 19, 2026

CISA has added CVE-2026-20253, a critical, remotely exploitable vulnerability in Splunk Enterprise, to its Known Exploited Vulnerabilities catalog, and ordered US federal …

Attackers are exploiting FortiSandbox vulnerabilities

June 16, 2026

Attackers have been spotted exploiting three vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089) in FortiSandbox, a platform that other Fortinet security products …

SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558)

June 16, 2026

A critical vulnerability (CVE-2026-48558) in SimpleHelp, a popular remote monitoring and management (RMM) tool, can be exploited remotely by unauthenticated attackers to …

Researchers release details, PoC for exploited Check Point VPN flaw (CVE-2026-50751)

June 12, 2026

WatchTowr researchers have disclosed a technical analysis and a “Detection Artefact Generator” for CVE-2026-50751, an authentication bypass flaw in Check …

Oracle PeopleSoft servers under attack, Oracle pushes out-of-band security alert

June 11, 2026

A zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft PeopleTools is being exploited in the wild, Charles Carmakal, CTO at cybersecurity firm Mandiant, part of Google …

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520)

June 10, 2026

Ivanti has patched two critical vulnerabilities (CVE-2026-10520 and CVE-2026-10523) in Ivanti Sentry and has urged customers to implement the fix right away. Though the …

LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271)

June 9, 2026

A command injection vulnerability (CVE-2026-42271) in BerryAI’s LiteLLM open-source AI gateway is being exploited by attackers, the US Cybersecurity and Infrastructure …

Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751)

June 8, 2026

A Qilin ransomware affiliate is believed to be exploiting CVE-2026-50751, an authentication bypass vulnerability in Check Point VPN Remote Access and Mobile Access, the …

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)

June 8, 2026

A vulnerability (CVE-2026-28318) that can be exploited to crash SolarWinds Serv-U file transfer servers is being leveraged by attackers in the wild, the US Cybersecurity and …

Google fixes actively exploited Android vulnerability (CVE-2025-48595)

June 2, 2026

Google has announced the June 2026 Android security updates, which fix a bucketload of vulnerabilities, including a high-severity vulnerability (CVE-2025-48595) in the Android …

Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)

June 1, 2026

CVE-2026-41089, a critical Windows Netlogon RCE flaw that allows remote code execution, is now actively exploited in the wild, the Centre for Cybersecurity Belgium (CCB) …

Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257)