Vulnerability

Critical Oracle WebLogic Server Vulnerability (CVE-2024-21182) Actively Exploited The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2024-21182,…

Critical Android Zero-Day Exploited in Targeted Attacks for Full Device Control A high-severity Android zero-day vulnerability, tracked as CVE-2025-48595, is…

Critical RCE Vulnerability in Widely Used VPN Exploited Within 24 Hours of Disclosure A recently disclosed remote code execution (RCE)…

Critical Windows Netlogon RCE Vulnerability (CVE-2026-41089) Under Active Exploitation A severe Windows Netlogon remote code execution (RCE) vulnerability, tracked as…

Critical Zero-Day in LiteSpeed cPanel Plugin Exploited in the Wild A severe zero-day vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end…

Critical StrongDM Authentication Flaw Allowed Session Hijacking via Local File Theft A severe vulnerability in StrongDM’s desktop application (CVE-2026-4387)…

Critical Plesk Vulnerability (CVE-2026-44962) Exposes Linux Servers to Full Takeover A severe security flaw in WebPros Plesk, a widely used…

Instagram AI Vulnerability Exposed Account Takeover Risk via Password Reset Abuse Instagram recently addressed a critical vulnerability in its Meta…

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Exploited in the Wild On May 29, 2026, CISA added CVE-2026-0257, a critical…

Critical Samba Vulnerability (CVE-2026-4480) Enables Unauthenticated Remote Code Execution A severe vulnerability in Samba’s printing subsystem, tracked as CVE-2026-4480,…

Critical Samba Vulnerability (CVE-2026-4480) Enables Unauthenticated Remote Code Execution A maximum-severity flaw (CVE-2026-4480, CVSS 10.0) has been discovered in…

TP-Link Patches High-Severity Vulnerability in TL-WR940N V6 Router TP-Link has released a security advisory addressing a high-severity vulnerability (CVE-2026-12935) in…