Vulnerability

Researchers Unveil NosyNeighbor: A Stealthy Side-Channel Attack Targeting Time-Critical Systems A team of researchers from Washington State University (WSU), the…

Critical Zero-Day Exploit Targets Arista VeloCloud Orchestrator (CVE-2026-16812) Arista Networks has disclosed CVE-2026-16812, a critical command injection vulnerability (CWE-78) in…

CISA Adds Actively Exploited Fortinet FortiOS Vulnerability to KEV Catalog CISA has included CVE-2025-68686, an actively exploited vulnerability in Fortinet…

Pope-Endorsed Prayer App Exposed 700K+ User Records for Months A critical security flaw in Click To Pray a Vatican-backed prayer…

Critical Remote Code Execution Flaw in vBulletin Exposes Forums to Unauthenticated Attacks A severe remote code execution (RCE) vulnerability in…

Keycloak Patches Broken Access Control Flaw Exposing User Data Keycloak has resolved a broken access control vulnerability (CVE-2026-17059) that allowed…

Critical Check Point Authentication Flaw Actively Exploited in the Wild The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has…

New Linux Kernel Vulnerability "RefluXFS" Grants Root Access via XFS Race Condition A critical Linux kernel vulnerability, CVE-2026-64600…

Public PoC Exploit Released for High-Severity Windows NT Kernel Privilege Escalation Flaw (CVE-2026-42980) A proof-of-concept (PoC) exploit for CVE-2026-42980, a…

ASUS Releases Critical Patch for High-Severity Router Vulnerability ASUS has issued urgent security updates to fix a high-severity vulnerability (CVE-2026-13385)…

Azure DevOps MCP Flaw Enables Silent Data Theft via AI Coding Assistants Security researchers at Manifold Security uncovered a critical…

Critical Fastjson Vulnerability (CVE-2026-16723) Under Active Exploitation Security researchers from ThreatBook and Imperva have identified active exploitation of a critical…