Coverage
Vulnerabilities
1245 articles on vulnerability disclosures and exploits
Advertisement
SAP NetWeaver & Commerce Cloud: Urgent Critical Patches Released
SAP addresses 15 vulnerabilities, including four critical flaws in NetWeaver AS Java and Commerce Cloud, requiring immediate patching to prevent remote exploitation.
Veeam Backup & Replication RCE via CVE-2026-44963 — Patch Guide
A critical RCE flaw (CVE-2026-44963) in Veeam Backup & Replication allows authenticated domain users to execute code. Patch immediately.
Siemens KACO Blueplanet Inverter Vulnerabilities: CVE-2025-40946 & CVE-2026-41125
Critical Siemens KACO Blueplanet Inverters are vulnerable to credential derivation (CVE-2025-40946) and SQL injection (CVE-2026-41125).
CVE-2023-38831: Russian APTs Target Ukraine via WinRAR Flaw
Russian threat actors are exploiting the CVE-2023-38831 WinRAR vulnerability to target Ukrainian government and military entities for data theft.
LLM-Assisted Exploit Creation: Claude Mythos Accelerates N-Day Attacks
Researchers demonstrate how Claude 3.5 Sonnet can automate exploit development, turning newly disclosed N-day vulnerabilities into functional attacks in hours.
OpenSSL 3.4.1 and 3.0.16 Patches: Fix for CVE-2025-0167 High-Severity Bug
OpenSSL releases patches for 18 vulnerabilities, including a high-severity AI-discovered bug, CVE-2025-0167. Learn how to secure your infrastructure now.
Anthropic Mythos Preview: Advancing AI Offensive Security Performance
XBOW evaluates Anthropic's Mythos Preview model, revealing high efficacy in automated vulnerability discovery, reverse engineering, and exploit development.
SAP NetWeaver and Commerce CVE-2024-21733 Mitigation Guide
SAP releases January 2024 security updates addressing critical vulnerabilities in BusinessObjects, NetWeaver, and Commerce Cloud. Patch now to prevent RCE.
CVE-2025-8088: Russia-Aligned Groups Exploit WinRAR Flaw in Ukraine
Russia-linked actors Earth Dahu and UAC-0226 exploit the CVE-2025-8088 WinRAR path traversal flaw to deploy info-stealers against Ukrainian organizations.
CISA Adds CVE-2026-42271 and CVE-2026-50751 to KEV Catalog
CISA warns of active exploitation involving BerriAI LiteLLM and Check Point Security Gateways. Learn how to mitigate these critical security flaws.
Google Patches CVE-2026-11645: 5th Chrome Zero-Day Exploited in 2026
Google addresses CVE-2026-11645, a critical zero-day vulnerability in Chrome being actively exploited. Learn about patch guidance and detection strategies.
CVE-2024-4947: Google Patches Fifth Chrome Zero-Day of 2024
Google addresses CVE-2024-4947, a high-severity V8 type confusion vulnerability in Chrome being exploited in the wild. Update to version 125.0.6422.60 now.
Check Point CVE-2024-24919: CISA Warns of Ransomware Exploitation
CISA mandates emergency patching for CVE-2024-24919 after Check Point VPN devices were targeted by ransomware gangs to gain initial network access.
CVE-2026-42271: BerriAI LiteLLM RCE Exploited in the Wild
CISA warns of active exploitation of CVE-2026-42271 in BerriAI LiteLLM. This command injection flaw allows attackers to achieve RCE and compromise AI proxies.
CVE-2024-24919: Check Point VPN Zero-Day Exploited by Qilin Affiliate
Check Point Security Gateway vulnerability CVE-2024-24919 is being exploited in the wild, enabling unauthenticated information disclosure and network access.
CVE-2026-23111: Linux Kernel nf_tables LPE and Container Escape
A one-character use-after-free vulnerability in the Linux kernel nf_tables subsystem allows local root access and container escapes. Patch immediately.
May 2026 CVE Landscape: Prioritize Remediation for High-Impact Threats
Analysis of the May 2026 CVE landscape, highlighting a 11% increase in high-impact vulnerabilities and critical risk scoring for security teams.
TeamPCP Campaign Update: Mini Shai-Hulud Framework Gains Adoption
Analysis of the TeamPCP supply chain campaign, the open-sourcing of the Mini Shai-Hulud framework, and its adoption by diverse threat actor groups in 2026.
Zcash Orchard Pool Logic Error Enables Infinite ZEC Minting
A critical vulnerability in the Zcash Orchard privacy pool allowed attackers to bypass validation and counterfeit ZEC via zero-knowledge proof flaws.
UniFi OS Root Access via CVE-2024-42029 Chain — Mitigation Guide
Exploit chain involving CVE-2024-42029, CVE-2024-42028, and CVE-2024-42027 allows unauthenticated root access to UniFi OS servers. Update to version 4.0.18.
Gogs 0.13.0 Patch: Fixing Critical CVE-2024-39930 RCE Vulnerability
Gogs has patched a critical zero-day vulnerability (CVE-2024-39930) in its built-in SSH server that enables unauthenticated remote code execution.
CVE-2026-50751: Critical Check Point VPN Password Bypass Patch Guidance
Check Point warns of active exploitation of CVE-2026-50751, a critical logic flow flaw in IKEv1 VPN setups allowing unauthenticated password bypass.
Anthropic Project Glasswing: AI Vulnerability Discovery Challenges
Anthropic's Project Glasswing identifies 23,000 potential vulnerabilities via the Mythos AI model, highlighting the massive gap between discovery and patching.
CVE-2024-24919: Qilin Ransomware Gang Exploits Check Point VPN Zero-Day
Check Point confirms that the Qilin ransomware group exploited CVE-2024-24919, a critical flaw in VPN gateways, to gain unauthorized network access.