Vulnerability

Critical Quest KACE SMA Vulnerability Exploited in Active Attacks Security researchers have uncovered active exploitation of a severe authentication bypass…

Critical Zero-Click Vulnerability in AVideo Platform Exposes Servers to Full Takeover A severe security flaw in the AVideo media streaming…

Critical WordPress Plugin Vulnerability Exploited in Active Attacks A severe security flaw in the User Registration & Membership WordPress plugin…

AWS-LC Cryptographic Library Flaws Expose Certificate and Signature Validation Risks Amazon has disclosed three critical vulnerabilities in AWS-LC, its open-source…

Critical WordPress Plugin Flaw Exposes Millions of Sites to Full Takeover A newly disclosed critical vulnerability in the WordPress User…

Critical Nginx UI Vulnerability (CVE-2026-27944) Under Active Exploitation A newly disclosed critical vulnerability in Nginx’s user interface (CVE-2026-27944) is…

CISA Adds Critical Hikvision Vulnerability to Exploited Flaws Catalog After Active Attacks On March 5, 2026, the Cybersecurity and Infrastructure…

Critical MongoDB Vulnerability (CVE-2026-25611) Enables Server Crashes via Low-Bandwidth Attacks A high-severity vulnerability (CVE-2026-25611, CVSS 7.5) has been identified…

Critical Authentication Bypass Flaw in pac4j-jwt Exposes Systems to Full Takeover A severe vulnerability in the widely used Java authentication…

Critical FreeScout Vulnerability (CVE-2026-28289) Enables Remote Server Takeover via Malicious Emails A newly disclosed vulnerability in FreeScout, an open-source help…

Amazon Quick AI Flaw Exposed Backdoor in Frontend-Only Permission Controls Security researchers uncovered a critical vulnerability in Amazon QuickSight, Amazon’…

Critical GitHub RCE Vulnerability (CVE-2026-3854) Exposed Millions of Private Repositories Security researchers at Wiz uncovered a severe remote code execution…