Vulnerability

Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940

Microsoft has released a revised security update package for on-premises Exchange Server, dated September 2026, which includes a fix for…

1 month ago

Citrix NetScaler SAML Vulnerability Enables Unauthenticated Remote DoS Attacks

Citrix has released emergency security updates to address a high-severity memory overflow vulnerability in NetScaler ADC and NetScaler Gateway. This…

1 month ago

Capacitor Vulnerability Lets Remote Content Run With Full App Origin Trust

A critical vulnerability in Capacitor, identified as CVE-2026-103922, could allow attacker-controlled remote content to execute within vulnerable Android and iOS…

1 month ago

Next.js ImageResponse Vulnerability Lets Remote Attackers Execute Code Through SVG Content

A critical vulnerability in Next.js could let unauthenticated remote attackers execute code on affected servers by supplying crafted input that…

1 month ago

Zimbra Vulnerability Exploited to Gain Root Access and Steal Mailbox Authentication Secrets

An active exploitation of CVE-2026-73570, a high-severity unauthenticated OS command-injection vulnerability in Zimbra Collaboration Suite. Attackers used to obtain root…

1 month ago

Hackers Exploit Citrix NetScaler Zero-Day to Gain Root Access and Deploy Web Shells

Threat actors are actively exploiting a critical zero-day vulnerability in Citrix NetScaler, identified as CVE-2026-88772, to gain unauthenticated root-level access…

1 month ago

Unsloth Fixes Arbitrary Code Execution Flaw Triggered by Malicious Hugging Face Models

Unsloth has addressed a critical arbitrary code execution vulnerability in its Studio web interface. This flaw allowed a malicious Hugging…

1 month ago

OpenSSL High-Severity Flaw Lets Attackers Leak Heap Memory in Plaintext

OpenSSL has announced a high-severity vulnerability in its Datagram Transport Layer Security (DTLS) implementation that could allow a remote peer…

1 month ago

Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code

Octopus Deploy has announced a high-severity vulnerability in Octopus Server that could allow authenticated users with project or environment editing…

1 month ago

Critical WatchGuard AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands

WatchGuard has announced the discovery of three high-impact vulnerabilities in its wireless access point platform. Two of these critical issues…

1 month ago