Week 28, 2026

Severity mix (113 articles)

• CRITICAL 9
• HIGH 62
• MEDIUM 13
• LOW 0
• INFO 29

Top stories

1. CRITICAL

   Zimbra Classic Web Client XSS: Critical Flaw Under Active Exploit

   Jul 10, 2026

2. CRITICAL

   Chrome 150 Update: Patching 27 Vulnerabilities, Critical Use-After-Free Flaws

   Jul 9, 2026

3. CRITICAL

   Microsoft Defender RoguePlanet Zero-Day Vulnerability Patching Guide

   Jul 9, 2026

4. CRITICAL

   Roundcube Flaw Exploited by China-Linked Group Against Academics

   Jul 8, 2026

5. CRITICAL

   Gitea CVE-2026-20896 Authentication Bypass Under Active Exploitation

   Jul 8, 2026

6. CRITICAL

   CVE-2024-37014: CISA Orders Federal Agencies to Patch Langflow

   Jul 8, 2026

7. CRITICAL

   CVE-2026-48282: Adobe ColdFusion Path Traversal RCE — Patch Now

   Jul 8, 2026

8. CRITICAL

   Critical RCEs: FortiNAC CVE-2023-33300 & SonicWall SMA Zero-Day

   Jul 7, 2026

9. CRITICAL

   NetScaler Memory Disclosure Flaw Under Active Exploitation

   Jul 6, 2026

10. HIGH

    RedHook Android Malware: Abusing Wireless ADB for Local Shell Access

    Jul 12, 2026

+ 103 more in the archive.

CVEs tracked this week (13)

• CVE-2023-33299
• CVE-2023-33300
• CVE-2023-34124
• CVE-2024-37014
• CVE-2024-42028
• CVE-2024-42433
• CVE-2026-11405
• CVE-2026-20896
• CVE-2026-40138
• CVE-2026-43499
• CVE-2026-48282
• CVE-2026-50656
• CVE-2026-53359