SectionVulnerabilities
Patches, advisories and the CVEs behind them.
FBI and CISA warn of active attacks on industrial refrigeration and cold-chain systems
A joint advisory from the FBI, CISA, and three U.S. federal agencies warns that attackers are targeting internet-exposed refrigeration controllers, with European…
SonicWall Will Not Patch End-of-Life GMS Flaws Exposing Files and Database Records
SonicWall says two vulnerabilities in end-of-life Global Management System 9.5.2 and earlier will receive no fix, leaving file disclosure and SQL injection…
DreamHost Confirms Two-Month Breach Exposed FTP and Webmail Credentials
Attackers exploited a vulnerability in DreamHost's web-based File Manager for roughly two months, stealing FTP/SFTP logins and accessing webmail session data before…
Barracuda Patches Two Critical Flaws Enabling Root Access on Appliances
Barracuda has fixed two vulnerabilities that, if chained, let an attacker with admin interface access bypass authorization and gain root control of…
Red Hat Patches Critical 9.8 Linux Kernel TCP RCE as Ubuntu Fix Lags in Testing
A use-after-free flaw in the Linux kernel's IPv4 TCP stack, rated 9.8 and remotely exploitable without authentication, has fixed builds out for…
Attackers Exploit Unpatched Max-Severity Flaw in CryptoPayment Gateway Plugin
Researchers warn that threat actors are actively targeting CVE-2026-81648, a critical unpatched WordPress plugin flaw that could expose wallet credentials and allow…
Cisco Patches Actively Exploited ASA/FTD VPN Flaw That Crashes Firewalls
Cisco has shipped fixes for a high-severity vulnerability in Secure Firewall ASA and FTD software already being exploited in the wild, allowing…
Critical Linux Kernel TCP Flaw Hits Ubuntu, RHEL; AI Wrote the Exploit
A 9.8-rated flaw in the Linux kernel's TCP stack, CVE-2026-98432, affects major distributions including Ubuntu and Red Hat, and Anthropic says its…
Critical Linux Kernel Bug Lets Attackers Get Root via MPTCP, AI Built the Exploit
A use-after-free in the Linux kernel's TCP networking code, rated 9.8 severity, can be remotely exploited for root code execution on MPTCP-enabled…
Android SMS of Death Exploit Lets Attackers Crash Phones With One Text
A proof-of-concept for CVE-2026-58882 shows how a malformed WAP Push message can crash Android's phone process, killing calls and triggering reboot loops…
Florida Financial Aid Site Breach Exposes SSNs of 4.9 Million People
Florida's Department of Education says an unauthorized party accessed a system tied to the state's student financial aid website, exposing names, addresses,…
TeamViewer Patches Flaw That Lets Controlled Machines Attack the Controller
A fixed TeamViewer vulnerability allowed a malicious or compromised host device to turn the tables on the viewer, crashing its TeamViewer client…