Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 24, 2026

GitLab Email Token Flaw Could Let Bad Actors Inject Code and Trigger Pipelines

Security researchers have uncovered a vulnerability in GitLab's "Email work item" feature that could allow threat…

CVE & Exploits · Sep 24, 2026

Critical WordPress Flaw Exploited Within Hours of Public Disclosure

Security researchers have observed active exploitation of a newly disclosed WordPress vulnerability, CVE-2026-87902,…

CVE & Exploits · Sep 24, 2026

Apache Tomcat 11.0.26 Patches Dozens of Vulnerabilities Including WebSocket Bypass Flaw

Apache Software Foundation announced the release of Tomcat 11.0.26, a maintenance update that resolves twelve security…

CVE & Exploits · Sep 24, 2026

CISA Unveils Roadmap to Strengthen U.S. Vulnerability Database After Contract Near‑Miss

The Cybersecurity and Infrastructure Security Agency (CISA) released a white paper on Wednesday that sketches a…

CVE & Exploits · Sep 24, 2026

CISA Expands Known‑Exploited List to Include Flaws in Check Point, Arista VeloCloud and F5 BIG‑IP APM

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced Tuesday that it has added three newly…

CVE & Exploits · Sep 24, 2026

Check Point Confirms Active Exploitation of Critical VPN RCE Flaw in Security Gateway

Cybersecurity firm Check Point has warned that threat actors are actively exploiting a severe pre‑authentication remote…

CVE & Exploits · Sep 24, 2026

Federal Agencies Lag Behind on CISA Cloud Security Mandate, Report Finds

A new watchdog report released Wednesday reveals that almost nine out of ten civilian executive‑branch agencies missed…

CVE & Exploits · Sep 24, 2026

Hackers Actively Exploit New WordPress Flaw to Run Shell Commands

Security researchers have confirmed that malicious actors are now moving beyond simple scanning of vulnerable WordPress…

CVE & Exploits · Sep 23, 2026

Critical F5 BIG‑IP APM Zero‑Day (CVE‑2026‑94127) Actively Exploited, Emergency Patch Issued

F5 Networks has issued an emergency security update for a newly disclosed vulnerability in its BIG‑IP Access Policy…

CVE & Exploits · Sep 23, 2026

Arista Issues Emergency Patches for Actively Exploited VeloCloud Orchestrator Flaw

Arista Networks has made emergency security updates available for a critical vulnerability in its VeloCloud…

CVE & Exploits · Sep 23, 2026

Chrome 154 Update Closes 108 Flaws, Including Critical Memory Safety Bugs

Google’s Chrome browser rolled out version 154, a release that addresses a total of 108 security vulnerabilities, among…

CVE & Exploits · Sep 23, 2026

Critical SharePoint On-Premises Flaw Lets Low‑Privilege Users Run Remote Code

Security researchers have identified a severe vulnerability in Microsoft SharePoint on-premises installations that…