Stories tagged “Vulnerability.”
30 stories
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. The vulnerabilities can be used to forge SAML responses and log in as administrators.
A critical security flaw in Keycloak's password reset feature allows unauthenticated attackers to take over any user account by forcing a password reset. Red Hat has released patches to address the issue.
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite (ZCS) within three days. The Zimbra security team patched the security flaw (tracked as CVE-2026-735…
Microsoft disclosed a critical remote code execution vulnerability affecting its Entra ID cloud identity service. The vulnerability, tracked as CVE-2026-69836, received a CVSS score of 10.0 and requires no existing privileges or user interaction to exploit.
A security vulnerability in the NTFS3 driver has been reported, allowing a pre-crafted NTFS image to grant root access to a Linux system. The issue has been unaddressed since its private reporting two months ago.
Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been exploited in attacks. The flaw, tracked as CVE-2026-69836, allowed threat actors with no privileges to gain code execution in low-complexity …
Cisco has published security updates for Crosswork platforms and Secure Workload Software, addressing nine vulnerabilities, including five with a CVSS score of 10.0. The issues affect Cisco Crosswork Release version 7.2.1 and earlier and have been addressed in version 7.2…
GitLab vulnerability exploited within days, watchTowr reports active exploitation. Fixes released in patched versions.
Microsoft has warned of a maximum-severity security flaw in Entra ID that has been exploited in the wild. The vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access managem…
Johnson Controls Simplex Incident Manager Vulnerability
A vulnerability in Johnson Controls Simplex Incident Manager allows local attackers to extract user credentials from system memory.
The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical MLflow vulnerability. This vulnerability can be used by attackers without privileges to remotely access internal services or cloud metadata…
Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrumen…
A critical vulnerability in Zimbra Collaboration Suite (ZCS) is being actively exploited by attackers. The flaw, tracked as CVE-2026-73570, allows unauthenticated attackers to gain remote code execution by exploiting a command injection weakness in the SNMP monitoring com…
A critical flaw in the Elementor Pro WordPress plugin, CVE-2026-32475, allows unauthenticated attackers to upload dangerous PHP files and achieve remote code execution.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability is a Server-Side Request Forgery (SSRF) vulnerability in MLflow.
A sophisticated JavaServer Pages (JSP) web shell, attributed to the Clop ransomware group, has been discovered targeting PTC Windchill and FlexPLM servers, designed to decrypt credentials and exfiltrate engineering data.
Attackers are exploiting a Server-Side Request Forgery (SSRF) vulnerability in MLflow to steal cloud credentials and secrets. The vulnerability, CVE-2026-64849, allows an attacker to reach cloud metadata services directly and exfiltrate sensitive data. Organizations runni…
Siemens Simcenter Nastran Vulnerability Exploited for Remote Code Execution
A stack overflow vulnerability in Siemens Simcenter Nastran has been exploited for remote code execution. The affected products are Simcenter Femap and Simcenter Nastran, and users are recommended to update to the latest versions.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are exploiting a high-severity Windows Task Host vulnerability. The vulnerability, tracked as CVE-2025-60710, allows local attackers with basic user permissions to gain SY…
SafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the data of nearly 40,000 customers. The exposed records included names, email addresses, shipping addresses, phone numbers, and purchase details, but did not i…
CISA flags critical Ray flaw, citing active exploitation. CVE-2025-62593 can lead to remote code execution via web browsers like Firefox and Safari.
GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user…
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow cont…
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites.
A vulnerability in the Certification Authority (CA) in Active Directory environments allows a low-privileged user to obtain a valid authentication certificate for a Domain Controller, which can be used to become the Domain Controller. This is a trust-validation problem th…
The Netherlands' NCSC warned of active exploitation of a macOS Screen Sharing vulnerability across systems with port 5900 exposed to the internet, where attackers gained root access and installed Monero mining programs.
Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call, with no fix from the chipset maker.
Microsoft is developing a patch for "ShieldBreak," a new zero-day privilege escalation vulnerability in Defender, disclosed by security researcher "Nightmare Eclipse." This flaw bypasses a previous Defender vulnerability, RoguePlanet, allowing local attackers to gain SYST…
A suspected Chinese-speaking APT is mass-exploiting a critical Broadcom VMware vCenter directory-traversal flaw (CVE-2026-59310, CVSS 9.8) to plant backdoors and stage ransomware across 361 victims in 47 countries.
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused.