Week 25, 2026

Severity mix (101 articles)

• CRITICAL 6
• HIGH 53
• MEDIUM 18
• LOW 1
• INFO 23

Top stories

1. CRITICAL

   CVE-2026-54420: LiteSpeed cPanel Plugin Flaw Under Active Exploit

   Jun 16, 2026

2. CRITICAL

   Fortinet FortiSandbox: Attackers Exploit CVE-2026-39813, -39808, -25089

   Jun 16, 2026

3. CRITICAL

   FortiSandbox RCE via CVE-2024-23108 and CVE-2024-23109 — Patch Now

   Jun 16, 2026

4. CRITICAL

   CVE-2026-20262: Cisco SD-WAN vManage Root Privilege Escalation Fix

   Jun 15, 2026

5. CRITICAL

   CVE-2026-0257: Palo Alto Networks PAN-OS GlobalProtect Bypass Active

   Jun 15, 2026

6. CRITICAL

   FortiSIEM RCE via CVE-2024-23108: Technical Mitigation Guide

   Jun 15, 2026

7. HIGH

   AryStinger Botnet: Thousands of D-Link Routers Compromised as Proxies

   Jun 21, 2026

8. HIGH

   North Korean Sapphire Sleet Compromises 140+ Mastra AI npm Packages

   Jun 20, 2026

9. HIGH

   FortiBleed: 73,932 FortiGate Systems Exposed – Credential Leak Analysis

   Jun 20, 2026

10. HIGH

    CVE-2024-49403: Gravity SMTP Information Disclosure Patch Guidance

    Jun 20, 2026

+ 91 more in the archive.

CVEs tracked this week (20)

• CVE-2018-13379
• CVE-2020-13573
• CVE-2021-39341
• CVE-2023-41892
• CVE-2023-6110
• CVE-2024-23108
• CVE-2024-23109
• CVE-2024-24919
• CVE-2024-49403
• CVE-2025-20701
• CVE-2026-0257
• CVE-2026-11317
• CVE-2026-20262
• CVE-2026-25089
• CVE-2026-39808
• CVE-2026-39813
• CVE-2026-4020
• CVE-2026-42530
• CVE-2026-42531
• CVE-2026-54420