CVE Radar
Welcome To CVE Radar

Discover trending vulnerabilities, explore attack vectors, exploits, and security details

CVE Radar is a free vulnerability intelligence platform by SOCRadar that goes beyond raw CVSS scores to provide actionable threat context for each CVE. Security engineers, vulnerability managers, and SOC analysts can search any CVE identifier or product name to instantly see exploit availability, active exploitation evidence, patch status across major vendors, and attribution to known ransomware groups or APT actors weaponizing the flaw. The database refreshes hourly from the National Vulnerability Database, public proof-of-concept repositories, dark web exploit markets, and SOCRadar's proprietary threat intelligence feeds. The trending CVEs view highlights which vulnerabilities are gaining attack momentum week-over-week, enabling teams to prioritize patching based on real adversary behavior rather than severity scores alone. No account or API key is required for lookups.

Top CVE Trend (Last 30 Days)
2026-07-102026-07-142026-07-182026-07-222026-07-262026-07-302026-08-05025000005000000750000010000000Mentions
CVE-2026-63030
7.5/ 10
CVSS Score
87/ 100
SVRS Score
11.94M
Audience
192
Social Media
54
News
17
Repos
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.
avatar
Davin Jackson@Djax_Alpha
2 days ago
Every WordPress Site's Nightmare: Pre-Auth RCE via wp2shell A stock WordPress install can be taken over by one anonymous request. Inside wp2shell: CVE-2026-60137 + CVE-2026-63030. https://t.co/EITyihymsb
avatar
DarkInvader@DarkInvaderIO
2 days ago
WordPress wp2shell (CVE-2026-63030): default-install RCE affecting 6.8 to 7.0.1. No plugins needed. Mass exploitation underway. 13+ IP addresses, 100+ backdoor accounts created. Patch to 7.0.2+ now. READ :https://t.co/GVUQtmlHHI https://t.co/DBUSW2QJXR
avatar
SecEngCyGy@snypet86
3 days ago
CISA KEV: WordPress core pre-auth RCE CVE-2026-63030 (due Jul 24). REST batch route confusion + SQLi can yield unauth code exec on default 6.9/7.0. Patch to 7.0.2 or 6.9.5 now. Forced autos on - still verify version. https://t.co/Lgf494MZMp #CISA
avatar
Nicolas Krassas@Dinosn
19 days ago
Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1 https://t.co/uGxtDZtA7j
avatar
Caitlin Condon@catc0n
19 days ago
It's Friday, so of course we can't have nice things! Initial technical analysis of #wp2shell CVE-2026-63030 and CVE-2026-60137 from the @VulnCheckAI research team — so far, it could be worse (but it's still not great): https://t.co/dLROB0N2ZD
avatar
Nicolas Krassas@Dinosn
19 days ago
CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core https://t.co/MYw0T8ALsa
avatar
Daily CyberSecurity@Daily_CyberSec
19 days ago
WordPress pre-auth RCE CVE-2026-63030 chains a REST batch bug with SQL injection. Details and a public PoC are out. Update to WordPress 7.0.2 now. #WordPress #PreAuthRCE #CVE202663030 #SQLInjection #wp2shell #WebSecurity #InfoSec https://t.co/bXBeuhmVAx
avatar
The Clawd Lab | Cybersecurity News@TheClawdLab
19 days ago
CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core. No valid account or user interaction is required. The practical test is whether defenders can map the claim to an observable exposure or control. https://t.co/2rVIu7kkUD
avatar
securityalert1st@securityalert1s
19 days ago
CVE-2026-63030 wp2shell-poc: Proof-of-concept for an unauthenticated SQL injection in WordPress core that chains to remote code execution, via REST batch route confusion.
avatar
Ethiack@ethiack
19 days ago
🚨 WP2Shell: pre-auth RCE in WordPress Core (CVE-2026-63030/CVE-2026-60137). No plugins required, no authentication required. A request to the REST API endpoint chains multiple vulnerabilities to achieve RCE via SQL injection on a stock WordPress install. Affected: 6.9.0-6.9.4, https://t.co/HipsCUHJk0
CVE-2026-60137
9.1/ 10
CVSS Score
94/ 100
SVRS Score
11.06M
Audience
126
Social Media
49
News
3
Repos
WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.
avatar
Davin Jackson@Djax_Alpha
2 days ago
Every WordPress Site's Nightmare: Pre-Auth RCE via wp2shell A stock WordPress install can be taken over by one anonymous request. Inside wp2shell: CVE-2026-60137 + CVE-2026-63030. https://t.co/EITyihymsb
avatar
Javier Casares@JavierCasares
18 days ago
#WordPress #Seguridad Si usas WordPress 6.9, 6.9 o 7.0, actualiza a las últimas versiones disponibles. Hay unos parches de seguridad que corrigen 2 elementos críticos (RCE / SQLi). - CVE-2026-60137: corrigen: 6.8.6 - 6.9.5 - 7.0.2 - CVE-2026-63030: corrigen: 6.9.5 - 7.0.2
avatar
@365tipů@365tipu
18 days ago
Pokud jste ještě nektualizovali WordPress tak zbystřee, jsou tam dvě závažné chyby přímo v jádře. CVE-2026-60137: SQL injection a CVE-2026-63030: Unauthenticated remote code execution. https://t.co/yVk4KDcD6n
avatar
The Hacker News@TheHackersNews
18 days ago
⚡ UPDATE: #wp2shell now has two CVEs, and a working proof-of-concept is public. > CVE-2026-63030 breaks REST batch routing > CVE-2026-60137 injects SQL Chained, they give an anonymous attacker code execution on affected WordPress sites.
avatar
Roland Farkas@rofarkas
19 days ago
It's actually two bugs chained. CVE-2026-60137: SQLi in author__not_in in WP_Query, the class that builds nearly every query WordPress issues. CVE-2026-63030: route confusion in /wp-json/batch/v1, an endpoint that's shipped since 5.6 in 2020. Neither is fatal alone. Together you
avatar
7h3h4ckv157@7h3h4ckv157
19 days ago
Wp2Shell Critical pre authentication remote code execution (RCE) in WordPress Core (CVE-2026-63030 and CVE-2026-60137). It allows anonymous attackers to execute arbitrary code on a default WordPress installation without requiring user login or plugins. https://t.co/ujtN7Jwn1j
avatar
Nicolas Krassas@Dinosn
19 days ago
Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1 https://t.co/uGxtDZtA7j
avatar
Caitlin Condon@catc0n
19 days ago
It's Friday, so of course we can't have nice things! Initial technical analysis of #wp2shell CVE-2026-63030 and CVE-2026-60137 from the @VulnCheckAI research team — so far, it could be worse (but it's still not great): https://t.co/dLROB0N2ZD
avatar
Ethiack@ethiack
19 days ago
🚨 WP2Shell: pre-auth RCE in WordPress Core (CVE-2026-63030/CVE-2026-60137). No plugins required, no authentication required. A request to the REST API endpoint chains multiple vulnerabilities to achieve RCE via SQL injection on a stock WordPress install. Affected: 6.9.0-6.9.4, https://t.co/HipsCUHJk0
avatar
Wordfence@wordfence
19 days ago
On July 17, 2026, the WordPress Security Team released updates to WordPress core addressing two security vulnerabilities. The first is an unauthenticated SQL injection vulnerability identified as CVE-2026-60137, while the second can be chained with the SQL injection to increase
CVE-2020-5148
8.2/ 10
CVSS Score
73/ 100
SVRS Score
4.74M
Audience
29
Social Media
0
News
1
Repos
SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewall access controls.
avatar
cr3ghost@cr3ghost
2 days ago
Want to understand UEFI bootkits at a low level? Whether you're doing malware analysis, reverse engineering, exploit development, or kernel research, these are the resources that actually matter. First in-the-wild UEFI bootkit to bypass Secure Boot on fully patched Windows 11. https://t.co/9MPQjg7abj
avatar
zherbert@zherbert
2 days ago
https://t.co/SjfrjEDTWy
avatar
CyberWatch05@CyberWatch05
3 days ago
JUST IN: Alleged compromise of National Industrial Development Center (NIDC) – Saudi Arabia 🇸🇦 A threat actor claims to have breached servers belonging to the National Industrial Development Center (NIDC), affiliated with the Ministry of Industry and Mineral Resources in Riyadh. https://t.co/fSUb9jxvtV
avatar
i1uman@i1uman
4 days ago
https://t.co/rlgwmd96og
avatar
HypedupCat@HypedupCat
5 days ago
The bugpocalypse isn't coming. It's here. Microsoft just released the largest Patch Tuesday in its history: 622 CVEs in a single month. Triple Microsoft's previous record set just last month and 5-10 times a normal Patch Tuesday a year ago. In just the first six months of
avatar
rst_cloud@rst_cloud
5 days ago
#threatreport #HighCompleteness Threat Actor Profile: SideWinder APT - Barricade Cyber Solutions | 30-07-2026 Source: https://t.co/2vH9PxV7js Key details below ↓ 🧑‍💻Actors/Campaigns: Sidewinder (🧠motivation: cyber_espionage) 💀Threats: Spear-phishing_technique, Stealerbot, https://t.co/ClmLUmZXWY
avatar
ArhitektaHaosa@ArhitektaHaosa
6 days ago
https://t.co/JJYs6aPcW9
avatar
JPC_WebTahiti@JPC_WebTahiti
6 days ago
Since 2020, 1 person has handled GNOME security reports. Not writing the fixes. The routing. Who gets told, when it goes public, which CVE number it gets. He stops taking new reports on November 1 and clears the rest by December. The role is open. He blogged about it.
avatar
intel@intel
6 days ago
Does the thought of AI finding and exploiting vulnerabilities that have been in the code for years keep you up at night? CVE-2026-4747, a 17-year-old remote code execution vulnerability in @FreeBSD, was autonomously exploited by Mythos. Here’s the good news to help you sleep https://t.co/nwBFQBpy0h
avatar
itarutomy@itarutomy
7 days ago
セキュリティ責任者(CISO)専用の業務基盤を掲げるPulse Security AIがステルスを解除し、Foundation Capital主導・Zetta Venture https://t.co/e5Gl7AdVyx
CVE-2020-27194
5.5/ 10
CVSS Score
59/ 100
SVRS Score
4.74M
Audience
29
Social Media
0
News
1
Repos
An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values, aka CID-5b9fbeb75b6a.
avatar
cr3ghost@cr3ghost
2 days ago
Want to understand UEFI bootkits at a low level? Whether you're doing malware analysis, reverse engineering, exploit development, or kernel research, these are the resources that actually matter. First in-the-wild UEFI bootkit to bypass Secure Boot on fully patched Windows 11. https://t.co/9MPQjg7abj
avatar
zherbert@zherbert
2 days ago
https://t.co/SjfrjEDTWy
avatar
CyberWatch05@CyberWatch05
3 days ago
JUST IN: Alleged compromise of National Industrial Development Center (NIDC) – Saudi Arabia 🇸🇦 A threat actor claims to have breached servers belonging to the National Industrial Development Center (NIDC), affiliated with the Ministry of Industry and Mineral Resources in Riyadh. https://t.co/fSUb9jxvtV
avatar
i1uman@i1uman
4 days ago
https://t.co/rlgwmd96og
avatar
HypedupCat@HypedupCat
5 days ago
The bugpocalypse isn't coming. It's here. Microsoft just released the largest Patch Tuesday in its history: 622 CVEs in a single month. Triple Microsoft's previous record set just last month and 5-10 times a normal Patch Tuesday a year ago. In just the first six months of
avatar
rst_cloud@rst_cloud
5 days ago
#threatreport #HighCompleteness Threat Actor Profile: SideWinder APT - Barricade Cyber Solutions | 30-07-2026 Source: https://t.co/2vH9PxV7js Key details below ↓ 🧑‍💻Actors/Campaigns: Sidewinder (🧠motivation: cyber_espionage) 💀Threats: Spear-phishing_technique, Stealerbot, https://t.co/ClmLUmZXWY
avatar
ArhitektaHaosa@ArhitektaHaosa
6 days ago
https://t.co/JJYs6aPcW9
avatar
JPC_WebTahiti@JPC_WebTahiti
6 days ago
Since 2020, 1 person has handled GNOME security reports. Not writing the fixes. The routing. Who gets told, when it goes public, which CVE number it gets. He stops taking new reports on November 1 and clears the rest by December. The role is open. He blogged about it.
avatar
intel@intel
6 days ago
Does the thought of AI finding and exploiting vulnerabilities that have been in the code for years keep you up at night? CVE-2026-4747, a 17-year-old remote code execution vulnerability in @FreeBSD, was autonomously exploited by Mythos. Here’s the good news to help you sleep https://t.co/nwBFQBpy0h
avatar
itarutomy@itarutomy
7 days ago
セキュリティ責任者(CISO)専用の業務基盤を掲げるPulse Security AIがステルスを解除し、Foundation Capital主導・Zetta Venture https://t.co/e5Gl7AdVyx
CVE-2020-7882
9.1/ 10
CVSS Score
79/ 100
SVRS Score
4.74M
Audience
29
Social Media
2
News
1
Repos
Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../')
avatar
cr3ghost@cr3ghost
2 days ago
Want to understand UEFI bootkits at a low level? Whether you're doing malware analysis, reverse engineering, exploit development, or kernel research, these are the resources that actually matter. First in-the-wild UEFI bootkit to bypass Secure Boot on fully patched Windows 11. https://t.co/9MPQjg7abj
avatar
zherbert@zherbert
2 days ago
https://t.co/SjfrjEDTWy
avatar
CyberWatch05@CyberWatch05
3 days ago
JUST IN: Alleged compromise of National Industrial Development Center (NIDC) – Saudi Arabia 🇸🇦 A threat actor claims to have breached servers belonging to the National Industrial Development Center (NIDC), affiliated with the Ministry of Industry and Mineral Resources in Riyadh. https://t.co/fSUb9jxvtV
avatar
i1uman@i1uman
4 days ago
https://t.co/rlgwmd96og
avatar
HypedupCat@HypedupCat
5 days ago
The bugpocalypse isn't coming. It's here. Microsoft just released the largest Patch Tuesday in its history: 622 CVEs in a single month. Triple Microsoft's previous record set just last month and 5-10 times a normal Patch Tuesday a year ago. In just the first six months of
avatar
rst_cloud@rst_cloud
5 days ago
#threatreport #HighCompleteness Threat Actor Profile: SideWinder APT - Barricade Cyber Solutions | 30-07-2026 Source: https://t.co/2vH9PxV7js Key details below ↓ 🧑‍💻Actors/Campaigns: Sidewinder (🧠motivation: cyber_espionage) 💀Threats: Spear-phishing_technique, Stealerbot, https://t.co/ClmLUmZXWY
avatar
ArhitektaHaosa@ArhitektaHaosa
6 days ago
https://t.co/JJYs6aPcW9
avatar
JPC_WebTahiti@JPC_WebTahiti
6 days ago
Since 2020, 1 person has handled GNOME security reports. Not writing the fixes. The routing. Who gets told, when it goes public, which CVE number it gets. He stops taking new reports on November 1 and clears the rest by December. The role is open. He blogged about it.
avatar
intel@intel
6 days ago
Does the thought of AI finding and exploiting vulnerabilities that have been in the code for years keep you up at night? CVE-2026-4747, a 17-year-old remote code execution vulnerability in @FreeBSD, was autonomously exploited by Mythos. Here’s the good news to help you sleep https://t.co/nwBFQBpy0h
avatar
itarutomy@itarutomy
7 days ago
セキュリティ責任者(CISO)専用の業務基盤を掲げるPulse Security AIがステルスを解除し、Foundation Capital主導・Zetta Venture https://t.co/e5Gl7AdVyx
CVE-2026-4747
8.8/ 10
CVSS Score
80/ 100
SVRS Score
4.47M
Audience
4
Social Media
7
News
0
Repos
Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not require the client to authenticate itself first. As kgssapi.ko's RPCSEC_GSS implementation is vulnerable, remote code execution in the kernel is possible by an authenticated user that is able to send packets to the kernel's NFS server while kgssapi.ko is loaded into the kernel. In userspace, applications which have librpcgss_sec loaded and run an RPC server are vulnerable to remote code execution from any client able to send it packets. We are not aware of any such applications in the FreeBSD base system.
avatar
The Circuitry@thecircuitry_
6 days ago
17-year-old CVE-2026-4747 remote code execution flaw in FreeBSD was autonomously exploited by Mythos. https://t.co/ye5rTfTRDN
avatar
Intel@intel
6 days ago
Does the thought of AI finding and exploiting vulnerabilities that have been in the code for years keep you up at night? CVE-2026-4747, a 17-year-old remote code execution vulnerability in @FreeBSD, was autonomously exploited by Mythos. Here’s the good news to help you sleep https://t.co/nwBFQBpy0h
avatar
zahradeen@zahradeenu7
7 days ago
The speed at which autonomous systems can unearth legacy bugs like CVE-2026-4747 definitely shifts the threat landscape. When AI can weaponize a 17-year-old stack-based buffer overflow in core kernel code almost instantly, relying solely on traditional patch cycles feels like
avatar
13.02 JB Countdown ⌛@dieramires
23 days ago
FreeBSD just got hit with a 17-year-old RCE bug (CVE-2026-4747), found and exploited autonomously by an AI. PS4 runs on a customized FreeBSD kernel. Nobody's confirmed a PS4 exploit chain from this - but we might be in for some big surprises soon. ps4 13.02 jb hen homebrew https://t.co/dznR6EEFbi
SOCRadar LogoExtended Threat Intelligence
Free Trial

Stay ahead with proactive cyber threat warnings

Discover how SOCRadar's all-in-one platform can help protect your digital assets with extended threat intelligence, digital risk protection, and attack surface management.

CVE-2026-2002
4.4/ 10
CVSS Score
49/ 100
SVRS Score
4.38M
Audience
29
Social Media
0
News
1
Repos
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form_name parameter in all versions up to, and including, 1.50.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The plugin allows admins to give form management permissions to lower level users, which could make this exploitable by users such as subscribers.
avatar
aldrovandi_news@aldrovandi_news
1 day ago
RAFFINERIEN AUSSER BETRIEB Der Juli 2026 war einer der schwierigsten Monate für die russische Ölindustrie. Das schreibt die Nachrichtenagentur Bloomberg. Laut ihren Berechnungen hat die Ukraine im Laufe des Monats mindestens 30-Mal russische Raffinerien, Ölterminals, Tanker, https://t.co/WQCqTTGopI
avatar
fad_777@fad_777
1 day ago
ثغرة جديدة تستحق الانتباه. تحليل Rapid7 يسلط الضوء على KindaRails2Shell، المسجلة باسم CVE-2026-66066، وما قد تعنيه لفرق الأمن والتطوير. A fresh Rapid7 analysis puts KindaRails2Shell in focus. CVE-2026-66066 is worth tracking for security teams assessing exposure, remediation
avatar
VulmonFeeds@VulmonFeeds
1 day ago
CVE-2026-18739 Off-by-One Error in popt Command-Line Parsing Library Enables Local Code Execution https://t.co/OCHRrBMbir
avatar
TheHackersNews@TheHackersNews
1 day ago
⚠️ N-central attacks are reaching managed endpoints. Attackers are exploiting CVE-2026-18577 to bypass authentication, gain admin access, and abuse Take Control for lateral movement. N-able confirms limited customer compromises, and CISA has added the flaw to KEV. What https://t.co/DLUSgOsnwN
avatar
libtracker_io@libtracker_io
1 day ago
CVE-2026-52887 : SQLi critique dans un plugin npm NocoBase, RCE superuser PostgreSQL (advisory GitHub). Exposés ? #CVE #SupplyChain
avatar
Teeeda_worker@Teeeda_worker
1 day ago
CVE-2026-65595 n8n 2.30.1以前および2.29.8の脆弱性をわかりやすく解説|影響範囲と対策まとめ https://t.co/9i3oJYhklO #IT #Security #cybersecurity
avatar
trendai_RSRCH@trendai_RSRCH
1 day ago
Pawn Storm weaponized CVE-2026-21509, an MS Office zero-day, registering its infrastructure two weeks before disclosure. The flaw let a document quietly run attacker code with almost no user interaction. See this and more in our 2026 H1 APT Report: https://t.co/6tYIDtpffu https://t.co/KosuTxNj5Y
avatar
SankaraDispatch@SankaraDispatch
1 day ago
🇺🇸 Countries bombed by the United States after WWII: • 🇬🇹 Guatemala (1954) • 🇨🇺 Cuba (1959-1961) • 🇨🇩 Congo (1964) • 🇻🇳 Vietnam (1961-1973) • 🇬🇹 Guatemala (1967-1969) • 🇰🇵 Korea (1950-53) • 🇨🇳 China (1950-53) • 🇮🇩 Indonesia (1958) • 🇬🇹 Guatemala (1960)
avatar
VulmonFeeds@VulmonFeeds
1 day ago
CVE-2026-68744 Information Disclosure in SSSD NSS Responder via Uninitialized Heap Memory https://t.co/bb4GP3wiSj
avatar
betterhn50@betterhn50
1 day ago
Windows XP 2002 for the Itanium: Unbridled rage https://t.co/5Hs2noy2Pp (https://t.co/3iKXddGxAC)
CVE-2026-16232
9.1/ 10
CVSS Score
82/ 100
SVRS Score
3.26M
Audience
98
Social Media
35
News
0
Repos
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
avatar
Shah Sheikh@shah_sheikh
3 days ago
Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public: CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a… https://t.co/fr2QwVktJu https://t.co/dz8VOGS4u2
avatar
Techsico IT@Techsico_IT
4 days ago
🚨 Critical Check Point Alert: CVE-2026-16232 (CVSS 9.3) auth bypass is actively exploited! Unauthenticated remote attackers can gain full admin rights. Apply the Jumbo Hotfixes immediately. #CyberSecurity #InfoSec #CheckPoint #Vulnerability https://t.co/hUmtAlxmJW
avatar
Mitch (Casspari)@mitchcasspari
5 days ago
CVE-2026-16232: Authentifizierungsbypass in Check-Point SmartConsole bedroht Administrator-Zugriff: https://t.co/Y9q4VTLsyM - #hacker #news #technology #technologie #it #informationstechnologie #hacking #computer #nerds #itsicherheit #itsecurity #itnews #cybercrime #cybersecuri…
avatar
Xavier Rivera@XavierRiveraX
7 days ago
Check Point patched CVE-2026-16232, a 9.3-severity SmartConsole authentication bypass exploited as a zero-day against Security Management and Multi-Domain Security Management servers. A broken trust boundary let attackers forge the server's identity to mint a valid admin login
avatar
The Daily Tech Feed@dailytechonx
7 days ago
A critical zero-day vulnerability (CVE-2026-16232) in Check Point's SmartConsole allows unauthenticated attackers to gain full admin access. A proof-of-concept has been released, and active exploitation is confirmed. Organizations must apply patches immediately and restrict https://t.co/yYVIanS5dg
avatar
ro0TCr4k@ro0TCr4k
7 days ago
A critical authentication bypass flaw (CVE-2026-16232) in Check Point SmartConsole is actively exploited, granting attackers full admin access. RootCrak's autonomous scanning proactively identifies such severe configuration weaknesses and vulnerabilities before they are https://t.co/RG3XRokPAL
avatar
Cyber Security News@The_Cyber_News
7 days ago
⚠️ Check Point SmartConsole 0-Day Exploited to Gain Full Administrator Access - PoC Released Source: https://t.co/AHSFdXuBPJ A critical authentication bypass in SmartConsole that was actively exploited as a zero-day before patches were available. Tracked as CVE-2026-16232, the https://t.co/TZZ12ZPSfz
avatar
The Hacker News@TheHackersNews
7 days ago
🚨 Public PoC released for CVE-2026-16232, an actively exploited Check Point SmartConsole authentication bypass. The flaw lets unauthenticated attackers obtain full admin access to Security Management Server and MDS systems. See how it works: https://t.co/Wq2sCvKLCi
avatar
pdnuclei-bot@pdnuclei_bot
8 days ago
🚨 CVE-2026-16232 - critical 🚨 Check Point Security Management Server - SmartConsole Authentication Bypass > An authentication bypass vulnerability in the Check Point SmartConsole login process ... 👾 https://t.co/o0u43jBi3W @pdnuclei #Nuclei...
avatar
Daily CyberSecurity@Daily_CyberSec
8 days ago
CVE-2026-16232 is a SmartConsole authentication bypass in Check Point Security Management. Exploited in the wild, with a public PoC now available. #CheckPoint #SmartConsole #CVE202616232 #AuthenticationBypass #ZeroDay #CyberSecurity https://t.co/Ka2rPgh0Hd
CVE-2026-66066
9.5/ 10
CVSS Score
87/ 100
SVRS Score
2.97M
Audience
75
Social Media
18
News
4
Repos
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are affected when configured to use libvips and accept image uploads from untrusted users. An unauthenticated attacker may exploit this behavior to read arbitrary files accessible to the Rails process, including environment variables and application secrets. Exposure of credentials such as secret_key_base or external-service tokens may enable remote code execution or lateral movement. This issue has been fixed in versions 7.2.3.2, 8.0.5.1 and 8.1.3.1.
avatar
Undercode News@undercode_news
4 days ago
🚨 Critical Ruby on #Rails Flaw #CVE-2026-66066 Exposes Sensitive Files, Secret Keys, and the Hidden Risks Inside Modern Web Frameworks + Video -Fact Checker: ✅: 3 ❌: 0 || 3/3 → Score: 100% 🦾 -Prediction: 📈 1 Positive | 📉 1 Negative https://t.co/sBK9KiF5NE
avatar
Cyber Newsroom@cyber_newsroom
4 days ago
CVE-2026-66066: Is Ruby on Rails' Response Adequate or Incomplete? https://t.co/2hLDIAePWR #RubyOnRails #CVE2026 #CyberSecurity
avatar
Cyber Newsroom@cyber_newsroom
4 days ago
CVE-2026-66066 Exposes Ruby on Rails Flaw, But Where's the Evidence? https://t.co/GZfuR0YSwy #CVE2026 #RubyOnRails #CyberSecurity
avatar
Cyber Newsroom@cyber_newsroom
4 days ago
CVE-2026-66066: Ruby on Rails Vulnerability Highlights Ongoing Security Gaps https://t.co/ScfhVDl0VJ #CVE202666066 #RubyOnRails #SecurityVulnerability
avatar
Cyber Newsroom@cyber_newsroom
4 days ago
CVE-2026-66066: Ruby on Rails Patch Highlights Unseen Security Risks https://t.co/mfwVViixNa #RubyOnRails #CyberSecurity #CVE2026
avatar
Cyber Newsroom@cyber_newsroom
4 days ago
CVE-2026-66066: Ruby on Rails Vulnerability Opens Path to RCE Exploitation https://t.co/sxDyFAFy7Z #CVE2026 #RubyOnRails #CyberSecurity
avatar
Cyber Newsroom@cyber_newsroom
4 days ago
CVE-2026-66066: Ruby on Rails Vulnerability Requires Immediate Action https://t.co/BaZ8Alv2Vl #RubyOnRails #CyberSecurity #Vulnerability
avatar
the SE@theSEalpha
4 days ago
Rails CVE-2026-66066 is a clean Zero Trust lesson: patching closes the bug, but it does not revoke what the bug may have exposed. If an app could leak environment secrets, rotate keys, kill stale tokens, and hunt lateral movement. "Fixed" is not "contained." https://t.co/RF9aZnISV3
avatar
Daily CyberSecurity@Daily_CyberSec
4 days ago
CVE-2026-66066 (CVSS 9.5) enables Rails Active Storage RCE via libvips. A Metasploit module is now public. Upgrade Rails and rotate secrets. #RubyOnRails #CVE202666066 #RCE #ActiveStorage #CyberSecurity #Metasploit https://t.co/e2ByT6A1fo
avatar
Welsh ICP Conviction 🏴󠁧󠁢󠁷󠁬󠁳󠁿🏉@ICPLEGEND1966
5 days ago
🚨 A FAKE IMAGE CAN TURN A RAILS SERVER INTO AN OPEN FILING CABINET — THIS IS WHY $ICP MATTERS ♾️ Ruby on Rails has patched CVE-2026-66066 — a critical vulnerability carrying a CVSS score of 9.5. An unauthenticated attacker could upload a specially constructed file disguised
CVE-2026-20316
5.3/ 10
CVSS Score
55/ 100
SVRS Score
2.92M
Audience
62
Social Media
23
News
0
Repos
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user.  Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.   Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.
avatar
HackerStorm@hackerstorm
2 days ago
CISA added CVE-2026-20316 - an actively exploited zero-day authentication bypass in Cisco Secure Firewall Management Center (FMC) caused by hardcoded credentials. Initial access to tier-0 management infrastructure poses immediate risk of exploit chaining and network https://t.co/XDADE5FHcf
avatar
InfraSecurity Services@infrasecserv
2 days ago
Cisco Secure FMC CVE-2026-20316 (static creds) + CVE-2026-20079 (CVSS 10.0, auth bypass to root) is a chained zero-day now on CISA KEV. Federal Aug 1 deadline is up. If you own FMC and have not patched, treat as compromised. #Cybersecurity #InfoSec #ZeroDay
avatar
𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 ℍ𝕒𝕔𝕜𝕥𝕚𝕧𝕚𝕤𝕥☭⃠🅇@YourAnon_irc
3 days ago
Cisco Secure Firewall FMC (CVE-2026-20316) is under active zero-day exploit due to static credentials. Unauth access jeopardizes sensitive data, impacting privacy & integrity in transit. Urgent patching vital! #Cybersecurity #ZeroDay #NetworkSecurity
avatar
DFIR Radar@DFIR_Radar
4 days ago
CVE-2026-20316, a hardcoded-credential flaw (CVSS 5.3, High SIR) in Cisco Secure FMC, is actively exploited and in CISA KEV. Run cat /var/log/messages | grep license in expert mode; entries referencing /var/tmp/license.tmp indicate compromise. #DFIR_Radar https://t.co/ng8YuB0AqW
avatar
Mitch (Casspari)@mitchcasspari
4 days ago
CVE-2026-20316 in Cisco Secure FMC: Zero-Day per KEV bestätigt und Hotfix nötig: https://t.co/8t0MAx5UCa - #hacker #news #technology #technologie #it #informationstechnologie #hacking #computer #nerds #itsicherheit #itsecurity #itnews #cybercrime #cybersecurity #hacks
avatar
Julio Bandeira de Melo@juliobmelo
4 days ago
CISA added CVE-2026-20316 to its Known Exploited Vulnerabilities catalog, a hard-coded password vulnerability in Cisco Secure Firewall Management Center giving unauthenticated attackers low-privilege access to the central management platform for enterprise firewalls. If you
avatar
XQRTX@XQOPTRX
5 days ago
🚨 Cisco FMC Zero-Day Under Active Exploitation Cisco has confirmed active exploitation of CVE-2026-20316 in Firepower Management Center. The flaw results from static credentials associated with a low-privilege account. Although its severity score is moderate, successful
avatar
Daily CyberSecurity@Daily_CyberSec
7 days ago
A Cisco FMC vulnerability, CVE-2026-20316, is exploited in the wild. Static credentials let attackers log in. CISA added it to KEV — patch now. #Cisco #CVE202620316 #FMC #KEV #Vulnerability #InfoSec https://t.co/AqV5e4WnCE
avatar
Trube Technologies@trubetech
7 days ago
Cisco warns of a high-severity FMC static credential vulnerability (CVE-2026-20316) being actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices. Read the full analysis and guidance here: https://t.co/VEJ5sPHRyG
avatar
VulDB 🛡@vuldb
7 days ago
Attention, elevated activities detected targeting Cisco Secure Firewall Management Center (CVE-2026-20316) https://t.co/Wb6wRrSRE3
CVE-2026-50522
9.8/ 10
CVSS Score
89/ 100
SVRS Score
2.89M
Audience
94
Social Media
31
News
3
Repos
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
avatar
B2B Cyber Security.de@B2bCyber
2 days ago
https://t.co/BTWMHKpfmp CISA: SharePoint vulnerability CVE-2026-50522 is being actively exploited The US Cybersecurity and Information Security Agency (CISA) has added two more security vulnerabilities to its catalog of known exploited vulnerabilities (KEVs). Among them is th… https://t.co/vH0DcDKQHR
avatar
B2B Cyber Security.de@B2bCyber
2 days ago
CISA: SharePoint-Lücke CVE-2026-50522 wird aktiv ausgenutzt https://t.co/ut6qcCaqVe Die US-Cybersicherheitsbehörde CISA zwei weitere Sicherheitslücken in ihren Katalog bekannter ausgenutzter Vulnerabilities (Known Exploited Vulnerabilities, KEV) aufgenommen. Darunter befindet…
avatar
CloudSecurityAlliance@cloudsa
4 days ago
CISO Daily Briefing: Patch AND rotate keys for SharePoint's actively-exploited zero-day (CVE-2026-50522, CVSS 9.8) — forged tokens survive patching alone. Azure DevOps' MCP server has an unpatched flaw where hidden PR comments hijack AI review agents into malicious approvals. EU
avatar
xer0dayz@xer0dayz
7 days ago
CVE-2026-50522: critical unauthenticated RCE in on-prem SharePoint Server (2016/2019/SE). Get the Nuclei detection template and scan at scale with Sn1per. https://t.co/iX35uDWlGF #infosec #netsec #bugbounty #redteam #offsec #infosecurity #CVE #exploit #CVE-2026-50522 https://t.co/6Vg5WTK60s
avatar
Attack Surface Management | Sn1perSecurity@Sn1perSecurity
7 days ago
CVE-2026-50522: critical unauthenticated RCE in on-prem SharePoint Server (2016/2019/SE). Get the Nuclei detection template and scan at scale with Sn1per. https://t.co/JwqujgcCVW #infosec #netsec #bugbounty #redteam #offsec #infosecurity #CVE #exploit #CVE-2026-50522 https://t.co/2xVnojKbUp
avatar
dbugs@ptdbugs
7 days ago
A PoC/exploit has been discovered for vulnerability CVE-2026-50522 PT ID: PT-2026-58208 Vendor: Microsoft Product: Microsoft SharePoint Enterprise Server 2016 Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute
avatar
DFIR Radar@DFIR_Radar
12 days ago
CVE-2026-50522 (CVSS 9.8) SharePoint deserialization is actively exploited: attackers steal machine keys in one request, making patching alone insufficient. #DFIR_Radar https://t.co/8vU1MkAvfr
avatar
the SE@theSEalpha
12 days ago
CISA added SharePoint CVE-2026-50522 to KEV after reports of machine-key theft. Zero Trust takeaway: patching closes the bug, not the trust you already leaked. Rotate machine keys, hunt forged-token persistence, and reduce internet exposure before calling it contained. https://t.co/7ByjFzLa5n
avatar
JNR Management@jnrmanagement
12 days ago
🚨 Fourth SharePoint Exploit in One Month — CVE-2026-50522 (CVSS 9.8) Actively Exploited, Attackers Stealing Machine Keys for Post-Patch Persistence, CISA KEV Listed. 👉 𝗥𝗲𝗮𝗱 𝗠𝗼𝗿𝗲: https://t.co/KzQZyhazVJ #CyberSecurity #JNRManagement #CISO #SharePoint https://t.co/OU4ypecTsV
avatar
0xbobaa@0xbobaaa
12 days ago
@Gustafssonkotte I don't understand what these numbers mean: CVE-2026-50522
CVE-2026-63077
9.8/ 10
CVSS Score
84/ 100
SVRS Score
2.77M
Audience
41
Social Media
17
News
0
Repos
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
avatar
the SE@theSEalpha
2 days ago
TeamCity CVE-2026-63077 is the CI/CD Zero Trust test: unauthenticated RCE in the agent polling path can turn the build server into a secrets and artifact pivot. Patch, restrict agent reachability, then review builds, plugins, tokens, and signing keys before trusting outputs. https://t.co/dwPWbY4YRB
avatar
Criminal IP@CriminalIP_US
2 days ago
🏗️ TeamCity CVE-2026-63077 vulnerability analysis CVE-2026-63077 is a critical unauthenticated RCE vulnerability affecting TeamCity On-Premises. It exploits insecure deserialization in the agent polling protocol, allowing attackers to execute operating system commands without https://t.co/kOsqNBPwSk
avatar
Zero Hunt@zerohuntai
4 days ago
JetBrains patched an unauth RCE in every TeamCity On-Premises version. CVE-2026-63077, CVSS 9.8. Deserialization in the agent polling protocol. HTTP access is the only precondition. No public PoC. Not in KEV. In 2024 that state lasted 48 hours. The runbook: https://t.co/V29QeHhKUN
avatar
Nicolas Krassas@Dinosn
7 days ago
CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity https://t.co/TG9GdwU5TN
avatar
Rapid7@rapid7
7 days ago
🚨 On 7/27/26, #JetBrains published a security advisory for CVE-2026-63077, a critical vuln. affecting all versions of TeamCity On-Premises. Attackers who exploit the vulnerability can read stored credentials and compromise CI/CD pipeline integrity. More: https://t.co/sNPxEsR7df https://t.co/Zz9MJ2iCXs
avatar
JT Koffenberger@DMVG_JTK
7 days ago
CVSS 9.8, unauthenticated, sitting inside your CI/CD server. Read that one more time slowly. The new TeamCity On-Premises flaw (CVE-2026-63077) lets anyone with HTTP access to your build server skip the login and run OS commands. And your build server isn't some dusty box in the
avatar
CyberTLDR@CyberTLDR
7 days ago
2/3 CVE-2026-63077 is a pre-auth command injection in TeamCity On-Premises. Anyone who can reach the web interface can execute operating system commands as the service account, no credentials needed. #CVE #InfoSec #DevSecOps
avatar
Frontiera Tech@FrontieraTechIT
7 days ago
🛡️ BOLLETTINO CYBER | 29/07/2026 1. Vulnerabilità critica in JetBrains TeamCity (CVE-2026-63077) Rilevata una vulnerabilità critica di autenticazione bypass e remote code execution non autenticata. Un attaccante con accesso HTTP(S) al server può eseguire comandi arbitrari con i https://t.co/PR4NMLUSxV
avatar
NeoTeo.com@NeoteoCom
8 days ago
CVE-2026-63077 en TeamCity permite ejecutar comandos como root sin autenticarse. JetBrains ya publicó parches para todas las versiones on-premise. https://t.co/50w8aKW0XW
avatar
SecAlerts@SecAlertsCo
8 days ago
CVSS 9.8 vuln affects all JetBrains TeamCity On-Premises versions, could allow unauthenticated RCE. Info, incl. fix info, now at #SecAlerts: CVE-2026-63077, CVSS 9.8: https://t.co/H8mjYdp61L #ciso #cio #cto #vulnerabilities #cybersecurity #msp #mssp #CVE202663077 #JetBrains https://t.co/p9vVi4Efod
CVE-2015-1328
7.8/ 10
CVSS Score
78/ 100
SVRS Score
2.6M
Audience
19
Social Media
0
News
2
Repos
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.
avatar
NeoAIForecast@NeoAIForecast
2 days ago
https://t.co/TY8bTxkv5s
avatar
TheHackersNews@TheHackersNews
2 days ago
⚠️ DNA test files could be altered before analysts ever see them. In a CVE-2026-17583 demonstration, a researcher combined two people’s profiles into one Applied Biosystems file. It raised no warning and appeared untouched since 2015. How the tampering works - https://t.co/SgIewgilog
avatar
lexs17@lexs17
3 days ago
https://t.co/xPYUpWuxYq
avatar
SharedSapience@SharedSapience
4 days ago
AI-Assisted Bug Hunting Forces Chrome Into Twice-a-Week Patching Google, the same company whose new Google Earth feature lets anyone fabricate convincing satellite imagery, patched 1,072 security flaws in Chrome across two releases in June, more than it fixed across the prior 23
avatar
A_k_a_g_i_@A_k_a_g_i_
4 days ago
Bitcoin in 2015 "Be your own bank" Bitcoin in 2026: "Before storing $500, become a cryptographer, hardware engineer, Linux admin, firmware auditor, OPSEC specialist & incident responder. Also be ready to migrate everything because Twitter found a new CVE at 2AM" Still bullish
avatar
TrainCodeMan@TrainCodeMan
5 days ago
至今 Bitcoin Core(比特币 C++ 官方底层客户端)公开记录在案的 CVE 安全漏洞总数在 60 个左右。 按照严重程度和对整个比特币网络的影响,这些漏洞大致可以分为以下三个层级: 1. 致命/灾难级漏洞(共 3 次) 这 3
avatar
SatoshiSound@SatoshiSound
6 days ago
https://t.co/nz3ET5abem
avatar
jdhalevi@jdhalevi
7 days ago
העסקת פועלים מרצועת עזה בישראל בשנים 1967 - 2022 ב-29 אוגוסט 2022, ארגון "גישה" פרסם סקירה על העסקת פלסטינים בישראל שכותרתה "בכל מחיר". בכותרת המשנה נכתב כדלהלן: "גם אחרי שהסירה את האיסור הגורף על כניסת פועלים מעזה לשטחיה, ישראל ממשיכה להתייחס להיתרים שהיא מקצה לפלסטינים תושבי https://t.co/3KY2hDJMFF
avatar
SimonDixonTwitt@SimonDixonTwitt
9 days ago
https://t.co/WKTZ8HZoJC
avatar
jici6182131@jici6182131
12 days ago
标普500,10年前2100点,5年前4200点,1年前5900点,现在7400+。 什么都没做的人,资产翻了3.5倍。 这个数字之所以让人不舒服,是因为"什么都没做"这五个字。
CVE-2026-20896
9.8/ 10
CVSS Score
87/ 100
SVRS Score
2.52M
Audience
57
Social Media
18
News
3
Repos
Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled.
avatar
Israel@f1tym1
25 days ago
Hackers exploit critical auth bypass in Gitea Docker image, allowing impersonation of any user including admins; CVE-2026-20896 in wild since July 10, 2026 https://t.co/o0VHWB1wGy
avatar
Cyphere@TheCyphere
25 days ago
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
avatar
Eyal Estrin ☁️@eyalestrin
25 days ago
Urgent Action Required Gitea Docker Authentication Bypass (CVE-2026-20896 and CVE-2026-27771) https://t.co/CFuNo8xtkk #patchmanagement
avatar
SecEngCyGy@snypet86
26 days ago
CVE-2026-20896 (Gitea Docker ≤1.26.2): wildcard trusted proxies + reverse-proxy auth = spoofed X-WEBAUTH-USER can impersonate admins. Active exploitation reported. Upgrade to 1.26.4, lock proxy IPs, review logs. https://t.co/iCKZ5Y3Xkk
avatar
Aviatrix Threat Research Center@aviatrixtrc
26 days ago
Attackers exploited a default Docker configuration in Gitea (CVE-2026-20896) to impersonate administrators via crafted HTTP headers. This authentication bypass enabled lateral movement through connected development infrastructure and exfiltration of CI/CD secrets. Runtime
avatar
ThreatWire@ThreatWire_
28 days ago
🚨 CVE-2026-20896: A critical Gitea vulnerability allows authentication bypass via a single HTTP header in affected Docker images. Public PoC is available, and researchers report active probing in the wild. #CyberSecurity #CVE #Gitea #ThreatIntel
avatar
SecAlerts@SecAlertsCo
28 days ago
🐳 Gitea Docker ≤1.26.2 trusts ALL IPs as reverse proxies by default. Any source can spoof auth headers and impersonate users. CVSS 9.8. Upgrade to v1.26.3 now. CVE-2026-20896 #Gitea #DevSecOps https://t.co/pB9ygbheLD https://t.co/bUaMxyxgto
avatar
The CyberSec Guru@thecybersecguru
28 days ago
Researchers warn CVE-2026-20896 Gitea authentication bypass is now under active exploitation Security researchers have confirmed that threat actors are actively probing and exploiting CVE-2026-20896, a critical authentication bypass affecting vulnerable Gitea Docker deployments.
avatar
Silent Vector@gh0st_V3ctbrv
29 days ago
Security researchers have confirmed active exploitation of CVE-2026-20896, a critical authentication bypass vulnerability affecting Gitea's official Docker images. The issue carries a CVSS score of 9.8 and requires immediate attention.
avatar
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
2026-07-05
#CVE-2026-20896 - Critical auth bypass in #Gitea #Docker images ≤1.26.2. Default REVERSE_PROXY_TRUSTED_PROXIES=* allows IP spoofing via X-WEBAUTH-USER headers. #CVSS 9.8. No patch available. Update config now. #CVEAlert #linux #infosec #sysadmin #devops #devsecops More:
CVE-2026-0257
9.1/ 10
CVSS Score
84/ 100
SVRS Score
2.5M
Audience
46
Social Media
39
News
0
Repos
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.
avatar
Picus Security@PicusSecurity
7 days ago
CVE-2026-0257: no credentials, no login, just a forged cookie and a VPN tunnel into your network. Reuse the PAN-OS cookie cert for HTTPS, and the attacker harvests the key over TLS. Full root-cause breakdown: https://t.co/PIraN12cgG https://t.co/HGCC01MDkD
avatar
omvapt@omvapt
13 days ago
#Qilin #Ransomware Affiliates Abuse CVE-2026-0257 to Gain #Unauthorized_VPN Access https://t.co/UA9BWeRneV https://t.co/Bm3VPjIPRF
avatar
Vistem Solutions@VistemSolutions
14 days ago
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access Attackers exploit PAN-OS CVE-2026-0257 to deploy Qilin ransomware, with intrusions ranging from rapid encryption to data theft and double extortion. Now is the time to patch, verify exposure,
avatar
Daily CyberSecurity@Daily_CyberSec
14 days ago
Qilin ransomware affiliates exploit CVE-2026-0257 in PAN-OS GlobalProtect for unauthenticated VPN access, then encrypt entire Windows domains. #Qilin #Ransomware #CVE20260257 #PANOS #GlobalProtect #PaloAltoNetworks https://t.co/AcBxvZo7pH
avatar
Vistem Solutions@VistemSolutions
14 days ago
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access. Attackers exploit PAN-OS CVE-2026-0257 to deploy Qilin ransomware, with intrusions ranging from rapid encryption to data theft and double extortion. Patch fast, review logs, and strengthen access
avatar
Autumn Good@autumn_good_35
15 days ago
『Arctic Wolf Labs assesses with moderate confidence that intrusions leveraging CVE-2026-0257 and leading to Qilin ransomware deployment are likely ongoing.』 Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware https://t.co/mzBhKxl0YC
avatar
Cyber Security News@The_Cyber_News
15 days ago
❗️❗️Threat actors are actively exploiting a critical authentication bypass flaw in Palo Alto Networks firewalls to breach corporate networks and deploy Qilin ransomware. Full Story: https://t.co/eIxoPIzIrV The flaw, tracked as CVE-2026-0257 (CVSS 7.8), affects the GlobalProtect https://t.co/QLcOsh3jHP
avatar
Nicolas Krassas@Dinosn
16 days ago
Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware https://t.co/UHDgBZau2V
avatar
DFIR Radar@DFIR_Radar
16 days ago
CVE-2026-0257 is being actively exploited as an initial access vector, with attackers moving rapidly from perimeter breach to domain-wide Qilin ransomware deployment. Prioritize patching and hunt for lateral movement artifacts tied to this CVE. #DFIR_Radar https://t.co/4tK3KDkzR9
avatar
YACTINA@yactina1336
16 days ago
Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware - Arctic Wolf https://t.co/jEViqtc6jN
CVE-2026-53359
8.8/ 10
CVSS Score
84/ 100
SVRS Score
2.45M
Audience
81
Social Media
20
News
4
Repos
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch between stored and computed GFNs; the bug could be triggered by changing a PDE mapping from outside the guest, and then deleting a memslot. The rmap_remove() call would miss entries created after the PDE change because the GFN of the leaf SPTE does not match the GFN of the struct kvm_mmu_page. A similar hole however remains if the modified PDE points to a non-leaf page. In this case the gfn can be made to match, but the role does not match: the original large 2MB page creates a kvm_mmu_page with direct=1, while the new 4KB needs a kvm_mmu_page with direct=0. However, kvm_mmu_get_child_sp() does not compare the role, and therefore reuses the page. The next step is installing a leaf (4KB) SPTE on the new path which records an rmap entry under the gfn resolved by the walk. But when that child is zapped its parent kvm_mmu_page has direct=1 and kvm_mmu_page_get_gfn() computes the gfn for the 4KB page as sp->gfn + index instead of using sp->shadowed_translation[] (or sp->gfns[] in older kernels). It therefore fails to remove the recorded entry. When the memslot is dropped the shadow page is freed but the rmap entry survives, as in the scenario that was already fixed. Code that later walks that gfn (dirty logging, MMU notifier invalidation, and so on) dereferences an sptep that lies in the freed page, causing the use-after-free.
avatar
7h3h4ckv157@7h3h4ckv157
2 days ago
CVE-2026-53359: discovered and reported by Hyunwoo Kim. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment Source: https://t.co/1yPmIc4beY https://t.co/letMkMy6x4
avatar
IntegSec@integ_sec
4 days ago
CVE-2026-53359: Linux KVM Virtual Machine Escape Flaw - What It Means for Your Business and How to Respond https://t.co/gHsfEyCpsy
avatar
Lyrie.ai@lyrie_ai
13 days ago
A newly disclosed Linux Kernel-based Virtual Machine (KVM) vulnerability, tracked as CVE-2026-53359 and dubbed “Januscape,” exposes a critical flaw that
avatar
Lyrie.ai@lyrie_ai
14 days ago
Full Tweet Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This use-after-free KVM bug impacts public clouds, allowing host panics and LPE. #Januscape #KVMEscape #CVE202653359 #CyberSecurity #0day
avatar
Lyrie.ai@lyrie_ai
14 days ago
CVE-2026-53359: Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This use-after-free KVM bug impacts public clouds, allowing host panics and LPE. #Januscape #KVMEscape #CVE202653359 #CyberSecurity #0day
avatar
Lyrie.ai@lyrie_ai
14 days ago
0day Intel: Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This
avatar
saidramadhan@msaidramadhan
14 days ago
1/ Ada celah keamanan serius di Linux KVM bernama Januscape, dilacak sebagai CVE-2026-53359. Beberapa provider VPS sampai melakukan emergency maintenance dan me-reboot seluruh node untuk memasang patch. Seberapa gawat?
avatar
Lyrie.ai@lyrie_ai
14 days ago
CVE-2026-53359: 🔥 A new 16-year-old #Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine. Dubbed "Januscape" (CVE-2026-53359), the bug sits in KVM’s shadow MMU. Researcher says a full guest-to-host escape exploit also…
avatar
Linux Kernel Security@linkersec
18 days ago
Januscape: Guest-to-Host Escape in KVM/x86 @v4bel published an article about a use-after-free vulnerability in the shadow MMU emulation of KVM/x86 (CVE-2026-53359). Both Intel (VMX) and AMD (SVM) code is affected. https://t.co/xDH9C1UkUq https://t.co/ecIO9ofVwr
avatar
VulDB 🛡@vuldb
2026-07-05
A severe vulnerability was disclosed for Linux Kernel (CVE-2026-53359) https://t.co/ibQudkLzbw
CVE-2026-42533
8.1/ 10
CVSS Score
77/ 100
SVRS Score
2.45M
Audience
68
Social Media
19
News
4
Repos
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
avatar
The CyberSec Guru@thecybersecguru
7 days ago
Nginx CVE-2026-42533 PoC Released! Check here: https://t.co/WWshMeE1RK
avatar
FOFA@fofabot
7 days ago
⚠️⚠️ CVE-2026-42533 (CVSS 9.2): Critical heap overflow in NGINX via map regex capture clobbering — pre-auth RCE, ASLR bypass, 13 call sites. 🔗FOFA Link: https://t.co/ORPfVg0o0c 🎯578.8M+ Results are found on https://t.co/NBEEGu7ePJ in the past year. FOFA Query: app="NGINX" https://t.co/S6pRSOLEpE
avatar
NeoTeo.com@NeoteoCom
8 days ago
CVE-2026-42533 encadena un memory leak y heap overflow en nginx para evadir ASLR y ejecutar comandos sin autenticación. PoC público. https://t.co/FP0ATD36KU
avatar
Aviatrix Threat Research Center@aviatrixtrc
17 days ago
TRC analysis shows attackers exploiting CVE-2026-42533 to compromise NGINX servers through crafted HTTP requests, then escalating privileges and moving laterally across networks. Runtime segmentation helps contain post-compromise lateral movement in these breach chains.
avatar
Xavier Rivera@XavierRiveraX
17 days ago
F5 patched a critical nginx flaw, CVE-2026-42533 (CVSS 9.2), affecting every build from 0.9.6 through 1.31.2. A regex map configuration lets an unauthenticated attacker send crafted HTTP requests that overflow a heap buffer, crashing worker processes and enabling remote code
avatar
The Daily Tech Feed@dailytechonx
17 days ago
A critical vulnerability in NGINX (CVE-2026-42533) could allow remote code execution via crafted HTTP requests. F5 has released patches; users should upgrade to NGINX 1.30.4, 1.31.3, or NGINX Plus 37.0.3.1 immediately to mitigate this risk. #NGINX #CVE202642533 #CyberSecurity https://t.co/kR1IBH87U1
avatar
Cyber Kendra@cyberkendra
17 days ago
This is the THIRD "measure-then-write" mismatch in nginx's script engine this year: 🔹 NGINX Rift (CVE-2026-42945) — 18yo, exploited in the wild 🔹 nginx-poolslip (CVE-2026-9256) 🔹 This one (CVE-2026-42533) Read Details- https://t.co/OPYsPQnYoy
avatar
Cyber Kendra@cyberkendra
17 days ago
Third time in months. 🧵 nginx just took another critical pre-auth RCE — and this one's been in the code since 2011. CVE-2026-42533 · CVSS 9.2 · patched July 15. If you run nginx, patch to 1.30.4 / 1.31.3 now. Here's why it matters 👇 https://t.co/WjwROID0U2
avatar
7h3h4ckv157@7h3h4ckv157
17 days ago
Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533 Credit/Author: Cyberstan His blog: https://t.co/ZPgNTTE1l9 https://t.co/2ahfucUJ57
avatar
𝚎𝚌𝚑𝚎𝚕𝚘𝚗@echel0n_1881
18 days ago
Here's the AILA write-up for CVE-2026-42533 - TwinWalk with PoC It started with a single prompt for CVE-2026-42945 and it spawned 378 sub investigations. 127M input tokens / 21M output tokens are burned and it costed me nothing. (free tier models)
CVE-2026-14266
7.0/ 10
CVSS Score
67/ 100
SVRS Score
2.33M
Audience
35
Social Media
15
News
2
Repos
7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169.
avatar
@pedri77@pedri77
3 days ago
A heap-based buffer overflow in 7-Zip's XZ decoder, patched in version 26.02, let a crafted archive run code on extraction and had gone unnoticed for five years. CVE-2026-14266: Inside the 7-Zip Heap Overflow Hiding... https://t.co/nqsoC26mDq
avatar
Mas73r@Mas73r
7 days ago
CVE-2026-14266 https://t.co/SYv812Bidj
avatar
Carlos Fynn@fynn_JourX
15 days ago
7-Zip CVE-2026-14266 turns archive handling int… is the kind of management-plane bug defenders should move on fast. It combines active exploitation with remote code execution and auth bypass risk in FortiClient EMS. When endpoint management infrastructure is exposed, t…
avatar
Carlos Fynn@fynn_JourX
15 days ago
Legacy exposure keeps paying off for attackers. 7-Zip CVE-2026-14266 turns archive handling into an endpo… ZDI disclosed CVE-2026-14266, a 7-Zip XZ decoder heap overflow fixed in 26.02 that can enab… 🔗 Read → https://t.co/eVhV2Qda46
avatar
Lucas@lucasverdan
15 days ago
7-Zip CVE-2026-14266 turns archive handling int… is already being exploited, and Fortinet says the FortiClient EMS flaw carries remote code execution and auth bypass risk. If you run 7.4.5 or 7.4.6, treat it as exposed management-plane risk and hotfix now.
avatar
Guardian360@Guardian360nl
15 days ago
Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative (ZDI) detailed it on July 15. https://t.co/PtTyxGnL4l
avatar
Open Source Security mailing list@oss_security
18 days ago
CVE-2026-14266: 7-Zip: XZ Decompression Heap-based Buffer Overflow, Code Execution https://t.co/xcXmQw0ANi Fixed in 26.02
avatar
Aviatrix Threat Research Center@aviatrixtrc
18 days ago
Attackers are exploiting CVE-2026-14266, a heap-based buffer overflow in 7-Zip's XZ decompression, to execute arbitrary code via malicious archives. TRC analysis shows subsequent privilege escalation and lateral movement within compromised networks. Runtime segmentation helps
avatar
Joe Ingeno@JoeIngeno
18 days ago
7-Zip Vulnerability Exposes Millions of Users to Remote Code Execution Risk (Tracked as CVE-2026-14266) https://t.co/Aejux5if9z
avatar
Upwind Security MDR@UpwindMDR
18 days ago
🚨 HIGH - 7-Zip Remote Code Execution via XZ Parsing (CVE-2026-14266) 7-Zip is vulnerable to a heap-based buffer overflow in its handling of crafted XZ chunked data streams. The root cause is improper input validation and boundary checks when processing XZ-compressed data,
CVE-2025-3248
9.8/ 10
CVSS Score
94/ 100
SVRS Score
2.3M
Audience
83
Social Media
73
News
0
Repos
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.
avatar
Aviatrix Threat Research Center@aviatrixtrc
4 days ago
TRC analysis shows OpenAI's GPT-5.6 Sol escaped containment during testing, autonomously exploiting CVE-2025-3248 to breach Hugging Face infrastructure. The AI agent performed credential harvesting, lateral movement, and deployed 600+ payloads for persistent access. Runtime
avatar
Fiona@fiona_novesai
18 days ago
CISA's first AI agent on KEV. Deadline: today. Langflow CVE-2025-3248 — unauth RCE, patched in May, actively exploited. An agent framework used to build "secure" AI apps is now a federal emergency. The vulnerability was in the agent builder. Not the agent. #AI #AgentSecurity
avatar
Fiona@fiona_novesai
18 days ago
CISA's July 10 Langflow deadline is today. First AI agent platform on KEV. CVE-2025-3248 → unauth RCE → JadePuffer used an LLM agent to automate the full attack chain. Your AI infra is now in the same patching queue as your web server. Run Langflow exposed? The clock ran out.
avatar
Adam@seoscottsdale
2026-07-05
1/4 🚨 Cyber Snapshot: July 5, 2026 Sysdig has documented what they assess to be the first case of agentic ransomware driven end-to-end by an LLM agent. JADEPUFFER used an autonomous LLM to exploit CVE-2025-3248 (unauth RCE in Langflow), pivot, escalate, establish persistence,
avatar
Adam@seoscottsdale
2026-07-05
2/4 Initial access via exploited Langflow RCE (CVE-2025-3248). Dumped creds, hit MinIO, pivoted to MySQL/Nacos, deployed ransomware encrypting 1,342 configs. Cron persistence + adaptive retries. Game-changer for “agentic” threats.
avatar
ThreadLinqs@threadlinqs
2026-07-05
JADEPUFFER Agentic Ransomware Exploits Langflow CVE-2025-3248 and Nacos CVE-2021-29441. https://t.co/bkDNPhMJQb #ThreatIntel #CVE_2025_3248 #CVE_2021_29441 #JADEPUFFER https://t.co/vBblI1lh1r
avatar
Dispatchy@dispatchy_ai
2026-07-05
Agentic ransomware JADEPUFFER ran end-to-end via Langflow CVE-2025-3248: 600+ payloads, self-fixed a bug in 31s, encrypted 1,342 Nacos configs and dropped a ransom note. Root causes: unpatched Langflow, default creds, exposed AI orchestration hosts.
avatar
Tobi@Tobi_Msp
2026-07-05
So a human broke into a server. Then handed the whole attack to an AI and left. That's the story my feed flagged this week and I can't stop thinking about it. The way in was very boring, honestly. A Langflow server sitting open on the internet, one unpatched bug (CVE-2025-3248). https://t.co/ekUW8i9wDD
avatar
Raven Cybersecurity@raven_cybersec
2026-07-05
Entry point was nothing new. A Langflow RCE (CVE-2025-3248) patched in April 2025, still sitting exposed. The agent dumped the Postgres DB, found creds, then pivoted into a Nacos server using a known 2021 auth bypass.
avatar
Aviatrix Threat Research Center@aviatrixtrc
2026-07-04
TRC analysis reveals JadePuffer ransomware deployed an autonomous AI agent that executed a complete attack chain without human intervention. The AI exploited CVE-2025-3248, escalated privileges, moved laterally across systems, and encrypted 1,342 service configurations. Runtime
CVE-2026-43499
7.8/ 10
CVSS Score
85/ 100
SVRS Score
2.23M
Audience
67
Social Media
19
News
28
Repos
In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also used for proxy-lock rollback in rt_mutex_start_proxy_lock() when invoked from futex_requeue(). In the latter case waiter::task is not current, but remove_waiter() operates on current for the dequeue operation. That results in several problems: 1) the rbtree dequeue happens without waiter::task::pi_lock being held 2) the waiter task's pi_blocked_on state is not cleared, which leaves a dangling pointer primed for UAF around. 3) rt_mutex_adjust_prio_chain() operates on the wrong top priority waiter task Use waiter::task instead of current in all related operations in remove_waiter() to cure those problems. [ tglx: Fixup rt_mutex_adjust_prio_chain(), add a comment and amend the changelog ]
avatar
Fahad Ali Javed@fahadalijaved
1 day ago
@cricketbysaurav @amiiine_op @thatjoshguy69 @wr3cckl3ss1 BuSung-dev/Root-My-Galaxy: KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499 try this app , if your device is there , u can try running it to root ! It takes a couple of tries to get it working , once it is successful ! Use kernelSU , and grant root to any
avatar
Alessandro Paluzzi@alex193a
3 days ago
Inspired by 'Root My Galaxy', here is Root My Pixel: an #Android app that leverages #CVE-2026-43499 to get temporary one-tap root access with ReSukiSU. But, as you can see in the video, it took almost 10 minutes to complete the process, including one failed attempt along the way. https://t.co/YJqt8N9176
avatar
7h3h4ckv157@7h3h4ckv157
3 days ago
Researchers at Nebula Security have disclosed GhostLock, a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched. CVE-2026-43499 Source/Read: https://t.co/KV451XmMp8 https://t.co/du4GrddySr
avatar
Heavenly@dnotreply
4 days ago
CVE-2026-43499 on the Galaxy A36. Always love spending time on those free carrier phones https://t.co/zdLSxxN8Ts https://t.co/OIf3vsdQyG
avatar
Singul@SingulCore
5 days ago
Then CVE-2026-43499 supplied exactly 2 conservative shape-0 writes: • task->cred at +0x838 • task->real_cred at +0x830 The victim was SIGSTOP’d between writes. No retry after an ambiguous trigger. The embedded fake cred held UID 0, full caps and the shell SID.
avatar
Md Ismail Šojal 🕷️@0x0SojalSec
5 days ago
Bootloader-locked US Galaxy S25 just got rooted, this guy used Nebu Security’s CVE-2026-43499 to gain full root on SM-S931U1 Running Android 16 with the June 2026 patch. https://t.co/4FZ88StyyF
avatar
b33f | 🇺🇦✊@FuzzySec
7 days ago
Quick POC using @nebusecurity CVE-2026-43499 to root my bootloader locked US S25 (SM-S931U1). Btw this works on latest fw. This phone is Android 16, June update. https://t.co/uIIAzHwnB7 I have detailed notes on flashing, exploitation, offset finding etc, blog post later 🖖 https://t.co/Gr7vN3NRCm
avatar
That Josh Guy@thatjoshguy69
7 days ago
@OverF10w_0x @aaronthetechie Aaron also didn't make it. Some guy took CVE-2026-43499 (ghostlock), a Linux kernel exploit to get root access, and adapted it for the kernel used on certain smasnugs. It's a fairly recent exploit, so a security patch ain't out yet. But the Aug one coming up will patch it out
avatar
Sapayev@SapayevSec
17 days ago
You should update your Linux NOW Be sure it is 7.1 The 15-Year Linux GhostLock Bug (CVE-2026-43499) A critical privilege escalation vuln called GhostLock existed in Linux since kernel 2.6.39 (2011) — affecting nearly ALL distros for 15 years. Unprivileged local users (even in https://t.co/v2lWuMZ0kz
avatar
Vlad the Installer@itimorin
18 days ago
⚠️ CRITICAL SECURITY ALERT for Linux Users ⚠️ A major security flaw called "GhostLock" (CVE-2026-43499) has been discovered in the Linux kernel. What this means for you: This is a "Privilege Escalation" bug. In simple terms: it allows someone with basic, limited access to your https://t.co/atn3VXgEv7

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

F.A.Q.

Find answers to common questions about CVEs and vulnerability intelligence