Week 30, 2026

Severity mix (140 articles)

• CRITICAL 12
• HIGH 66
• MEDIUM 27
• LOW 0
• INFO 35

Top stories

1. CRITICAL

   CVE-2026-16723: Fastjson 1.x RCE Exploited in Spring Boot Applications

   Jul 25, 2026

2. CRITICAL

   SolarWinds ARM RCE via CVE-2024-28995 — Technical Mitigation Guide

   Jul 24, 2026

3. CRITICAL

   Zimbra Zero-Click Exploitation by Russian APT for Email Theft

   Jul 23, 2026

4. CRITICAL

   Check Point CVE-2026-16232: Zero-Day Exploit Targeting VPN Gateways

   Jul 23, 2026

5. CRITICAL

   Check Point SmartConsole CVE-2026-16232 Auth Bypass — Patch Now

   Jul 23, 2026

6. CRITICAL

   CVE-2026-50522: SharePoint RCE Exploitation to Steal Machine Keys

   Jul 21, 2026

7. CRITICAL

   WordPress Core RCE via CVE-2026-63030 — wp2shell Mitigation Guide

   Jul 21, 2026

8. CRITICAL

   PAN-OS GlobalProtect Authentication Bypass Exploited by Qilin

   Jul 21, 2026

9. CRITICAL

   WP2Shell: WordPress RCE via Chained CVE-2026-60137 & CVE-2026-63030

   Jul 21, 2026

10. CRITICAL

    CVE-2026-63030: WordPress Core SQLi Leads to Unauth RCE

    Jul 20, 2026

+ 130 more in the archive.

CVEs tracked this week (19)

• CVE-2022-25247
• CVE-2024-28995
• CVE-2024-36401
• CVE-2024-37367
• CVE-2024-37368
• CVE-2024-4741
• CVE-2026-14266
• CVE-2026-15409
• CVE-2026-15410
• CVE-2026-16232
• CVE-2026-16723
• CVE-2026-29059
• CVE-2026-32194
• CVE-2026-42533
• CVE-2026-50522
• CVE-2026-60137
• CVE-2026-63030
• CVE-2026-64600
• CVE-2026-8933