Vulnerability

Critical Command Injection Flaw in Soliton Systems’ FileZen Exposes Enterprises to Remote Attacks A severe vulnerability (CVE-2026-25108) has been identified…

Windows Error Reporting Flaw (CVE-2026-20817) Enables Local Privilege Escalation to SYSTEM A critical vulnerability in Windows Error Reporting (WER), tracked…

Dutch Government Agencies Hit by Major Data Breach via Ivanti Software Flaw A critical vulnerability in Ivanti Endpoint Manager Mobile…

Threat Actors Exploit React2Shell Vulnerability to Hijack NGINX Web Traffic Researchers at Datadog Security Labs have uncovered a multi-stage, automated…

Critical PyTorch Vulnerability (CVE-2026-24747) Enables Arbitrary Code Execution via Malicious Model Files A severe vulnerability in PyTorch’s checkpoint loading…

SmarterMail Patches Critical RCE Flaw (CVE-2025-52691) in Business Email Servers SmarterTools has released a patch for CVE-2025-52691, a maximum-severity remote…

Critical Privilege Escalation Flaw in Apache StreamPipes Patched Apache has released a security patch for a critical privilege escalation vulnerability…

Mustang Panda Deploys Undocumented Kernel-Mode Rootkit in Targeted Cyber Espionage Campaign In mid-2025, the Chinese state-linked hacking group Mustang Panda…

CISA Issues Emergency Directive for MongoBleed Vulnerability in MongoDB The Cybersecurity and Infrastructure Security Agency (CISA) has mandated U.S.…

Critical Windows Vulnerability (CVE-2025-50165) Exploits JPG Encoding Flaw for Remote Code Execution Researchers at ESET conducted a deep-dive analysis of…

MongoBleed Vulnerability Exposes Sensitive Data in 87,000 MongoDB Instances A high-severity vulnerability, MongoBleed (CVE-2025-14847), allows attackers to leak sensitive…

Marbled Dust Exploits Zero-Day in Output Messenger for Cyber Espionage Targeting Kurdish Military A Türkiye-linked threat actor, tracked as Marbled…