Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 7, 2026

Hackers Exploit New MikroTik RouterOS Flaws to Seize Internet‑Facing Routers

Security researchers have confirmed that attackers are actively leveraging a pair of freshly disclosed vulnerabilities…

CVE & Exploits · Sep 7, 2026

New “Bring Your Own Trusted Caller” Method Lets Hackers Bypass Windows Driver Auth Controls

A security researcher collective known as GBHackers has documented a novel Windows attack technique called Bring Your…

CVE & Exploits · Sep 7, 2026

Roundcube Issues 12 Patches to Seal Zero‑Click XSS and SSRF Gaps

Open‑source webmail platform Roundcube has rolled out two security patches, versions 1.6.19 and 1.7.4, that remediate a…

CVE & Exploits · Sep 7, 2026

Critical Telerik UI Flaw Enables Unauthenticated Remote Code Execution via Padding Oracle

Security researchers have uncovered a serious vulnerability chain affecting Progress Telerik UI for ASP.NET AJAX, a…

CVE & Exploits · Sep 7, 2026

AI Sandbox Breach Exposes Critical Isolation Flaws in Autonomous Agent Testing

Security researchers have demonstrated that autonomous AI agents can break out of their designated sandbox…

CVE & Exploits · Sep 7, 2026

N-able releases fourth N‑central hotfix in five weeks to seal unauthenticated RCE bug

N-able, a provider of remote monitoring and management software, issued its fourth emergency hotfix for the on‑premises…

CVE & Exploits · Sep 7, 2026

Researcher Discloses CrowdStrike Zero‑Day That Could Enable Privilege Escalation

A security researcher has publicly released details of a zero‑day vulnerability affecting CrowdStrike's endpoint…

CVE & Exploits · Sep 7, 2026

N-able Issues Critical Patch for Remote Code Execution Flaw in N‑Central Platform

N-able has rolled out an emergency update to close a critical vulnerability identified as CVE-2026-86218 in its…

CVE & Exploits · Sep 7, 2026

Hackers Target PaperCut Print Management Software Exploiting New CVEs

Security researchers have confirmed that malicious actors are actively exploiting two newly disclosed vulnerabilities…

CVE & Exploits · Sep 7, 2026

North Korean-linked hackers infiltrate South Korean firms via HAProxy backdoor

A newly uncovered Linux‑based espionage toolkit, which security analysts tie to North Korean‑aligned threat actors with…

CVE & Exploits · Sep 7, 2026

Active Exploits Target Magento and Adobe Commerce via New “StyleSmuggler” Remote Code Execution Flaw

Security researchers have confirmed that a critical, unauthenticated remote code execution flaw—dubbed StyleSmuggler—is…

CVE & Exploits · Sep 7, 2026

N-able Issues Emergency Fix for Critical Remote Code Execution Bug in N‑Central Platform

N-able has rolled out an emergency hotfix to address a maximum‑severity remote code execution vulnerability discovered…