Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · 1h ago

Axios Vulnerabilities Could Let Attackers Bypass Proxy Controls and Launch SSRF Exploits

Axios maintainers have announced the discovery of several high‑severity security flaws that enable attackers to…

CVE & Exploits · 5h ago

HPE Issues Firmware Fixes After Critical Flaws Discovered in Instant On Access Points

Hewlett Packard Enterprise (HPE) has rolled out a set of firmware updates for its Networking Instant On series of…

CVE & Exploits · 7h ago

Researchers Release First PoC for Apple CoreGraphics Flaw Tied to Malicious PDFs

Security researchers have unveiled the first publicly available proof‑of‑concept for CVE‑2026‑86950, a vulnerability in…

CVE & Exploits · 7h ago

Zimbra Collaboration Suite Faces Active Root-Level Exploit via Unauthenticated Command Injection

Security researchers have confirmed that attackers are actively exploiting a newly disclosed flaw in the Zimbra…

CVE & Exploits · 8h ago

Bitget Attributes $387.5 Million Heist to Third‑Party Zero‑Day Flaw

Cryptocurrency exchange Bitget announced on Wednesday that the $387.5 million theft reported last week was enabled by a…

CVE & Exploits · 15h ago

OpenAI Disrupts Coordinated Effort to Extract Model Reasoning, Blames Chinese Competitor

OpenAI announced on Wednesday that it had halted a coordinated campaign aimed at distilling and extracting the…

CVE & Exploits · 17h ago

Dutch Institute Attributes Network Intrusion to Chain of Zammad Zero-Day Flaws

The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that a recent breach of its own network was…

CVE & Exploits · 17h ago

WatchGuard releases patches for 15 Fireware OS flaws, including critical remote code execution bug

WatchGuard Technologies has issued a security update for its Fireware operating system that resolves fifteen separate…

CVE & Exploits · 18h ago

Google Researchers Warn AI-Driven Surge Pushes Monthly Vulnerability Reports Past 10,000

Google's security team has sounded the alarm that the volume of disclosed software vulnerabilities has surged…

CVE & Exploits · 20h ago

Threat Actors Leverage Patched Zimbra Bug to Install Web Shells and Steal Credentials

Security researchers at Microsoft have uncovered a campaign in which threat actors weaponized a critical vulnerability…

CVE & Exploits · 21h ago

CISA Alerts Critical Pre‑Authentication Flaw in MikroTik RouterOS

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency alert about a newly discovered…

CVE & Exploits · 21h ago

Cisco Alerts Firms to Active Exploitation of Critical SD‑WAN Manager Authentication Bypass

Cisco Systems issued a security advisory on September 30 warning that a critical authentication bypass flaw in its…