Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 5, 2026

Critical PostgreSQL Bug Allows Low‑Privileged Users to Hijack Database Servers

A severe vulnerability in PostgreSQL, identified as CVE-2026-6471 and dubbed “PostGREShell,” has been disclosed,…

CVE & Exploits · Sep 5, 2026

Education Institutions Targeted as Hackers Exploit New PaperCut Vulnerabilities to Harvest Credentials

Threat actors have begun exploiting two recently disclosed PaperCut software vulnerabilities to harvest login…

CVE & Exploits · Sep 5, 2026

Broadcom Issues Immediate Update to Seal Critical VMware Workstation and Fusion VM‑Escape Flaws

Broadcom has released a security update that addresses two high‑severity vulnerabilities affecting VMware Workstation…

CVE & Exploits · Sep 5, 2026

CISA Flags Chromium V8 Vulnerability as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially listed a newly disclosed flaw in…

CVE & Exploits · Sep 4, 2026

HPE Issues Critical Patch for ArubaOS-CX After Discovery of High‑Severity RCE Flaws

Hewlett Packard Enterprise has released a set of security updates aimed at fixing a cluster of remote‑code‑execution…

CVE & Exploits · Sep 4, 2026

Hackers Actively Exploit Critical Citrix NetScaler Auth Bypass (CVE‑2026‑19490)

Security researchers have confirmed that threat actors are now leveraging a critical authentication‑bypass flaw in…

CVE & Exploits · Sep 4, 2026

PostgreSQL Patches Long‑Standing Replication Role Vulnerability (CVE‑2026‑6471)

PostgreSQL’s development team has issued a set of updates that close a security weakness allowing accounts with the…

CVE & Exploits · Sep 4, 2026

Hidden Trojan Embedded in HAProxy Load Balancers Used by South Korean Firms to Manipulate Web Traffic

Security analysts have uncovered a previously unknown Linux toolkit, internally named "ted," that was compiled directly…

CVE & Exploits · Sep 4, 2026

Decade-Old PostgreSQL Flaw Enables Server Takeover, Researchers Reveal

Security researchers at Cyera have uncovered a vulnerability in PostgreSQL that has existed for roughly twelve years,…

CVE & Exploits · Sep 4, 2026

Remote Code Execution Flaw in Sangoma Switchvox Actively Exploited, Researchers Warn

A critical vulnerability identified as CVE-2026-9586 is being leveraged by attackers to gain unauthenticated access to…

CVE & Exploits · Sep 4, 2026

Anonymous Researcher Discloses CrowdStrike Falcon Zero‑Day that Escalates to SYSTEM on Modern Windows

An undisclosed security researcher using the moniker "Nightmare Eclipse" has released a previously unknown…

CVE & Exploits · Sep 4, 2026

AI-Driven Bug Flood Tests Software Vendors' Capacity to Patch

AI-driven scanning tools, from large language model assistants to automated fuzzers, are generating a torrent of…