Microsoft SharePoint Code Injection Vulnerability (CVE-2026-65660) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Vulnerabilities
CVEs, zero-days, patches and actively exploited flaws.
All Vulnerabilities stories
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2026-67279) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds One Known Exploited Vulnerability to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
On Anthropic’s AI Misuse Report
Severity: ElevatedAction: Be aware
VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
Severity: ElevatedAction: Be aware
Trust and the enticing consultancy offer
Severity: ElevatedAction: Be aware
VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability
Severity: HighAction: Review
Adobe Commerce and Magento Incorrect Authorization Vulnerability (CVE-2026-71362) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
WSO2 Multiple Products Path Traversal Vulnerability (CVE-2026-5430) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Siemens Mendix Runtime (Update A)
Severity: ElevatedAction: Mitigate
Eufy Omni C20, Omni X10 Pro
Severity: CriticalAction: Patch
Botslab G980H Dashcams
Severity: CriticalAction: Review
VU#273940: Enterprise Access Management EAM does not rotate RSA keys
Severity: HighAction: Review
VU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers
Severity: ElevatedAction: Be aware
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators
Severity: ElevatedAction: Be aware
Stable Channel Update for Desktop
Severity: CriticalAction: Patch
Check Point Multiple Products Improper Certificate Validation Vulnerability (CVE-2026-85102) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (CVE-2026-94127) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVE-2026-93952) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV