SectionVulnerabilities
Patches, advisories and the CVEs behind them.
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe released security updates for ColdFusion and Campaign Classic addressing 12 vulnerabilities, including seven rated at maximum severity with CVSS scores of…
CISA Adds Exploited SharePoint RCE Flaw to KEV, Orders Federal Patch
A high-severity deserialization vulnerability in Microsoft SharePoint is now actively exploited, prompting CISA to mandate federal agencies patch within three days under…
Quest NetVault Backup SQL Injection Flaw Enables Remote Code Execution
A high-severity SQL injection vulnerability in Quest NetVault Backup allows authenticated attackers to execute arbitrary code remotely, with the added complication that…
Unraid File Upload Flaw Enables Authenticated RCE, Patched in 7.3.0
A command injection vulnerability in Unraid's FileUpload.php allows authenticated remote attackers to execute arbitrary code. A fix is available in Unraid version…
X.Org Server Use-After-Free Bug Enables Local Privilege Escalation to Root
A use-after-free vulnerability in X.Org Server's SyncAwait object handling allows a local attacker with low privileges to escalate to root. A patch…
Kubota North America Breach Exposed Employee Data Over 35 Days
Kubota North America has disclosed a network intrusion lasting more than a month that exposed sensitive personal and financial data belonging to…
Medtronic Notifies Customers After ShinyHunters Breach Exposed 9M Records
Medical device giant Medtronic is sending breach notifications after the ShinyHunters extortion group accessed corporate IT systems in April, potentially exposing names,…
CISA Adds SharePoint RCE Flaw CVE-2026-45659 to KEV Catalog
CISA has added a high-severity Microsoft SharePoint Server remote code execution vulnerability to its Known Exploited Vulnerabilities catalog after confirming active exploitation…
Google Patches 382 Vulnerabilities in Chrome 151, 15 Rated Critical
The Chrome 151 release addresses a record-setting batch of security flaws, with 358 of them discovered internally, likely aided by AI-assisted vulnerability…
Apple Patches 37 Flaws in iOS, macOS, and Safari, 26 in WebKit Alone
Apple's latest round of security updates addresses dozens of vulnerabilities across its platform, with the majority concentrated in WebKit and exploitable through…
ATEN Unizon Directory Traversal Flaw Exposes Files to Unauthenticated Attackers
A path validation failure in ATEN's Unizon software lets remote, unauthenticated attackers read arbitrary files at SYSTEM-level privilege. ATEN has issued a…
Oracle PeopleSoft RCE Flaw Allows Auth Bypass via Deserialization
A deserialization vulnerability in Oracle PeopleSoft's HubMBeanPersistance method enables remote code execution, with the built-in authentication requirement undermined by a bypass condition.