Cisco said attackers are actively exploiting a zero-day vulnerability in Cisco Secure Email Gateway that can let...
Vulnerabilities
Used for cybersecurity news about vulnerabilities, including CVEs, zero-days, remote code execution flaws, actively exploited vulnerabilities, security weaknesses, and newly disclosed security issues. Use this tag when the vulnerability itself is the main subject of the news article.
XBOW said on October 13, 2026, that Google paid it $250,000 for a Chrome full-chain exploit that...
Ivanti Connect Secure is affected by a high-severity zero-day vulnerability that attackers exploited before its October 13,...
GitLab has patched CVE-2026-97229, a CVSS 10.0 integer-overflow vulnerability in the CI/CD regular-expression compiler that could allow...
Active exploitation of a critical vulnerability in the Bricksforge WordPress plugin is allowing unauthenticated attackers to upload...
The Samsung Galaxy S26 was successfully compromised three times on the second day of Pwn2Own Ireland 2026,...
Vulnerabilities in LibreOffice Calc and Apache OpenOffice Calc can execute attacker-supplied Java code when a crafted spreadsheet...
An Apple CoreGraphics proof-of-concept for CVE-2026-86950 now publicly reproduces a crash caused by a crafted PDF with...
Two Citrix NetScaler vulnerabilities, CVE-2026-88771 and CVE-2026-88772, were actively exploited for weeks before their public disclosure, Citrix...
A renewed mass-exploitation campaign is targeting Oracle PeopleSoft Environment Management Hub servers through CVE-2026-35273, a critical unauthenticated...
