Vulnerability

CISA Warns of Actively Exploited Trend Micro Apex One Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has…

Trump Mobile’s T1 Phone Site Exposed Customer Data via Simple Exploit A security flaw in Trump Mobile’s website…

Highly Critical Drupal Core Vulnerability Set for May 20, 2026 Disclosure A severe security flaw in Drupal core, rated "…

Critical Cisco Secure Workload Vulnerability Exposes Internal APIs to Unauthenticated Attacks Cisco has disclosed a severe security flaw (CVE-2026-20223) in…

Google’s Chromium Bug Leak Exposes Unfixed JavaScript Execution Flaw Google accidentally leaked details of an unfixed vulnerability in Chromium…

Drupal Admins Scramble to Patch Critical SQL Injection Vulnerability Drupal has issued an urgent security update to address a maximum-severity…

PinTheft: New Linux LPE Exploit Grants Root Access via RDS Zerocopy Bug A newly disclosed Linux Local Privilege Escalation (LPE)…

Critical NGINX JavaScript Vulnerability (CVE-2026-8711) Enables Remote Code Execution A newly disclosed vulnerability in NGINX JavaScript (njs), tracked as CVE-2026-8711,…

Critical Windows BitLocker Zero-Day Vulnerability Exposes Encrypted Data via Physical Access Microsoft has revealed a severe zero-day vulnerability in Windows…

Critical PostgreSQL RCE Exploit (CVE-2026-2005) Demonstrated in Public PoC A proof-of-concept (PoC) exploit for CVE-2026-2005, a critical remote code execution…

New Linux Kernel Vulnerability "DirtyClone" Enables Root Access Without a Trace A critical local privilege escalation flaw in…

High-Severity SSRF Vulnerability in OHIF Viewers DICOM Exposes Clinician Tokens A high-severity Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-12473) has been…