Vulnerability

Critical VS Code MCP Vulnerability Exposes Developers to Silent Attacks A newly disclosed vulnerability in Visual Studio Code’s Model…

Critical Webmin Vulnerabilities Expose Root Access and Bypass 2FA A critical stored cross-site scripting (XSS) vulnerability in Webmin, the popular…

Microsoft 365 Copilot Vulnerable to "SearchLeak" One-Click Data Exfiltration Attack Researchers at Varonis Threat Labs uncovered a critical…

Critical Cisco SD-WAN Manager Zero-Day Exploited in the Wild Cisco has disclosed an actively exploited zero-day vulnerability in its Catalyst…

Critical Microsoft 365 Copilot Vulnerability Exposed Sensitive Data via SearchLeak Attack A recently patched critical vulnerability in Microsoft 365 Copilot…

Microsoft 365 Copilot Vulnerability Chain Exposed in "SearchLeak" Exploit Security researchers at Varonis Threat Labs uncovered a critical…

Critical Splunk Enterprise Vulnerability (CVE-2026-20253) Exposes Systems to Unauthenticated RCE Security researchers have disclosed a critical vulnerability in Splunk Enterprise,…

Critical LiteLLM RCE Vulnerability Actively Exploited in the Wild Threat actors are actively exploiting a critical unauthenticated remote code execution…

Ivanti Discloses High-Severity Privilege Escalation Flaw in Neurons for ITSM Ivanti has revealed a high-severity improper access control vulnerability, CVE-2026-9614,…

Critical Oracle WebLogic Server Vulnerability (CVE-2024-21182) Actively Exploited The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2024-21182,…

Critical Android Zero-Day Exploited in Targeted Attacks for Full Device Control A high-severity Android zero-day vulnerability, tracked as CVE-2025-48595, is…

Critical RCE Vulnerability in Widely Used VPN Exploited Within 24 Hours of Disclosure A recently disclosed remote code execution (RCE)…