SeverityCritical briefings
Only the stories rated critical: the flaws to patch first.
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall Flaws to KEV
CISA has flagged a maximum-severity GitLab integer overflow vulnerability and a Cisco firewall denial-of-service flaw as actively exploited, ordering federal agencies to…
Critical Wasmtime Flaws Could Let WebAssembly Modules Break Out of Their Sandbox
Wasmtime maintainers have patched two critical vulnerabilities that could allow a malicious WebAssembly module to escape the runtime's sandbox, with one flaw…
PHP2Shell Flaws Draw Mass Scans as Attackers Chase Mirai Deployment
Millions of exploit attempts are targeting newly disclosed PHP2Shell vulnerabilities as attackers try, and mostly fail, to pull vulnerable systems into the…
Ruby Patches Onigmo Regex Bugs Tied to Four Critical GitLab RCE Flaws
Ruby has shipped fixes for three memory corruption bugs in its Onigmo regex engine after GitLab traced four critical remote code execution…
PHP Rushes Emergency Patches After Two Critical RCE Flaws Leak Early
Details of two critical remote code execution vulnerabilities affecting PHP versions 5 through 8 leaked ahead of schedule, pushing the PHP security…
Critical BlockStrap Flaw Could Let Hackers Run Code on Magento Servers
Researchers warn that CVE-2026-103849, a maximum-severity template injection bug in Adobe Commerce and Magento, could soon be weaponized despite Adobe's lower urgency…
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Land Fast
Drupal has fixed two critical remote code execution vulnerabilities affecting all supported core versions, urging administrators to patch quickly before attackers reverse-engineer…
Attackers Exploited Collabora RCE in Nextcloud Weeks Before CVE Went Public
Threat actors began planting PHP web shells on Nextcloud servers via a flaw in the built-in Collabora CODE app in mid-September, more…
Cisco Patches Actively Exploited Secure Email Gateway Root Flaw
A critical path traversal bug in Cisco Secure Email Gateway's Advanced Malware Protection feature is being exploited in the wild to gain…
CISA Flags Actively Exploited Ivanti Connect Secure Zero-Day
A newly disclosed authentication bypass in Ivanti Connect Secure is under active exploitation, with attackers executing commands in memory to steal credentials…
Microsoft Patches Record 1,413 Flaws, CISA Flags Exploited Windows Zero-Day
Microsoft's latest Patch Tuesday fixes an unprecedented 1,413 vulnerabilities, including a Windows flaw already under active attack. CISA has added it and…
Critical Ghostscript Flaw Lets Malicious PDFs Hijack Servers
A heap buffer overflow in Ghostscript, tracked as CVE-2026-39919, can be triggered by a crafted PDF to achieve remote code execution on…