Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
30 / 576 results
criticalbug_reportVulnerabilitySAP patches two critical RCE flaws in Kernel and NetWeaver (CVSS 10.0)
CVE-2026-44756 (CVSS 10.0) affects SAP Kernel versions 7.22–9.20 and WEBDISP 9.16–9.20 across KRNL64NUC, KRNL64UC, and KERNEL components. CVE-2026-58240 (CVSS 9.8) affects SAP NetWeaver Message Server in Kernel 9.16, 9.18, 9.19, 9.20.
criticalbug_reportVulnerabilityFortinet FortiOS & FortiSwitchManager RCE requires immediate patching
Fortinet FortiOS and FortiSwitchManager affected by remote code execution vulnerability. Specific affected versions not disclosed in available information. CVE identifier not yet assigned or published.
criticalbug_reportVulnerabilityN-able N-central pre-auth RCE (CVE-2026-86218) requires immediate patch
N-able N-central remote monitoring and management (RMM) platform. Specific affected versions not disclosed in available information. Pre-authentication attack surface suggests all internet-facing instances are at risk.
criticalbug_reportVulnerabilityMicrosoft Sept 2026 Patch Tuesday: 964 CVEs, 2 zero-days under attack
Microsoft products across the ecosystem. 964 vulnerabilities total: 104 critical, 860 important. Two zero-day vulnerabilities are actively exploited in the wild.
criticalbug_reportVulnerabilityAlby Hub critical flaw enables wallet takeover on internet-exposed instances
Alby Hub versions v1.7.0 through v1.18.5 (all releases before August 2025). Only instances exposed to the internet are vulnerable. Versions v1.19.0 and later are patched. Current version is v1.24.0.
criticalbug_reportVulnerabilitycPanel SQL injection flaw allows mail users to escalate to root
All supported versions of cPanel and WHM (release lines 11.110, 11.134, 11.136, 11.138, and WP Squared). Fixed in builds 11.110.0.143, 11.134.0.55, 11.136.0.39, 11.138.0.4, and 11.138.1.9 (WP Squared).
criticalbug_reportVulnerabilityMicrosoft Defender zero-day "ShieldCrash" bypasses September patch
Microsoft Defender on all supported Windows 10, Windows 11, and Windows Server versions with September 2026 Patch Tuesday updates applied. The vulnerability is an incomplete fix for CVE-2026-69414 (ShieldBreak), allowing arbitrary file read as SYSTEM…
criticalbug_reportVulnerabilityMicrosoft patches 966 flaws including 2 actively exploited zero-days
Microsoft products (specific products and versions not disclosed in provided data). Two zero-day vulnerabilities are actively exploited; 964 additional flaws patched in September 2026 Patch Tuesday.
criticalbug_reportVulnerabilityAdobe Commerce/Magento unauthenticated RCE requires immediate patching
Adobe Commerce and Magento platforms. Specific affected versions not disclosed in available information. Vulnerability allows unauthenticated remote code execution.
criticalbug_reportVulnerabilityAdobe Commerce zero-day CVE-2026-75650 exploited since Sept 4 for backdoors
Adobe Commerce 2.4.4 through 2.4.9 (all 2026-aug and earlier), Adobe Commerce B2B 1.3.3 through 1.5.3 (all 2026-aug and earlier), and Magento Open Source 2.4.6 through 2.4.9 (all 2026-aug and earlier).
criticalbug_reportVulnerabilityMagento StyleSmuggler zero-day actively exploited to deploy backdoor
All versions of Magento and Adobe Commerce, including latest patched versions. Affects approximately 160,000 websites globally, including 14,000 in the top 1 million sites.
criticalbug_reportVulnerabilityMikroTik RouterOS critical vulnerabilities require immediate patching
MikroTik RouterOS - specific versions not provided in advisory. All RouterOS deployments should be considered at risk pending vendor bulletin review.
criticalbug_reportVulnerabilityN-able N-central RCE flaw (CVE-2026-86218) exploited in wild
N-able N-central RMM platform: all on-premises builds below version 2026.3.1.14, including servers patched with Hotfix 3 (2026.3.1.13) released hours earlier. Hosted N-central (NCOD) instances already patched by vendor.
criticalbug_reportVulnerabilityN-able N-central RCE flaw (CVE-2026-86218) exploited in the wild
N-able N-central on-premises deployments prior to version 2026.3 Hotfix 4. Approximately 1,500 instances exposed online, primarily in the US and Europe. Used by IT departments and MSPs for remote monitoring and management.
criticalbug_reportVulnerabilityMagento/Adobe Commerce zero-day actively exploited since Sept 4
Magento Open Source and Adobe Commerce all current versions including 2.4.6, 2.4.7, 2.4.8, and 2.4.9. Confirmed exploitation on Magento Open Source; Adobe Commerce impact unconfirmed. Unauthenticated remote code execution via GraphQL.
criticalbug_reportVulnerabilityCritical VMware Workstation/Fusion integer overflow allows VM escape
VMware Workstation and VMware Fusion versions 25H2 and 26H1. Affects systems with VMXNET3 virtual network adapter (CVE-2026-59346) and HGFS enabled (CVE-2026-59347). Both vulnerabilities require local administrative privileges on the guest VM.
criticalbug_reportVulnerabilityMikroTik RouterOS SSH vulnerabilities actively exploited (MikroTrick)
MikroTik RouterOS all versions prior to 7.25beta3, 7.24.2, 7.23.4, and 6.49.21. Devices with SSH service exposed to the internet are at highest risk. Six vulnerabilities identified, two critical (CVE-2026-67276, CVE-2026-86060) enable full device tak…
criticalbug_reportVulnerabilityPaperCut auth bypass and RCE chain actively exploited in education sector
PaperCut NG and MF, all versions. Primarily targeting education sector (K-12 schools and universities) in the U.S. and Europe. CVE-2026-81578 (authentication bypass) and CVE-2026-82078 (remote code execution) exploited in chain.
criticalbug_reportVulnerabilityCitrix NetScaler auth bypass CVE-2026-19490 exploited in the wild
Citrix NetScaler ADC and NetScaler Gateway appliances configured as AAA virtual servers or Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy). Specific vulnerable versions not disclosed in advisory.
criticalbug_reportVulnerabilityVMware Workstation and Fusion overflow flaws require immediate patching
VMware Workstation and VMware Fusion virtualization products. Specific affected versions not disclosed in available information. Overflow vulnerabilities present significant exploitation risk.
criticalbug_reportVulnerabilityCrowdStrike Falcon zero-day grants SYSTEM privilege escalation on Windows
CrowdStrike Falcon Sensor (all current versions) on Windows 11 25H2 and Windows Server 2025. Vulnerability exploits the Office malicious macros remediation feature. No CVE assigned yet.
criticalbug_reportVulnerabilityActive RCE exploits target Super Forms and Elementor Pro WordPress plugins
WordPress plugins: Super Forms – Drag & Drop Form Builder (fixed in 6.3.314) and Elementor Pro (fixed in 4.2.2). CVE-2026-14894 affects all unauthenticated users; CVE-2026-32475 requires at least one published Elementor page with Form widget containi…
criticalbug_reportVulnerabilityChrome 152 patches actively exploited V8 type confusion zero-day
Google Chrome versions prior to 152.0.7977.82 on Windows/macOS/Linux. The vulnerability (CVE-2026-85046) affects the V8 JavaScript engine. Chromium-based browsers (Microsoft Edge, Brave, Opera, Vivaldi) are also affected pending vendor patches.
criticalbug_reportVulnerabilityHPE patches critical RCE in ArubaOS-CX network switches (CVE-2026-73749)
ArubaOS-CX network operating system on HPE Aruba enterprise switches. Affected versions: 10.18.0001, 10.17.1021 and earlier, 10.16.1051 and earlier, 10.13.1180 and earlier, 10.10.1180 and earlier.
criticalbug_reportVulnerabilityCisco patches critical RCE in Nexus 9000 switches and 7 IOS XR flaws
Cisco Silicon One-based Nexus 9000 switches (10 models including N9324C-SE1U, N9348Y2C6D-SE1U, N9364E-SG2-O/Q, N9396T12C-SE1, N9348Y12C-SE1, N9396Y12C-SE1, N9336C-SE1, N9K-C9804, N9K-C9808) running NX-OS 10.3(1) through 10.6(3s).
criticalbug_reportVulnerabilityElementor Pro CVE-2026-32475 actively exploited for webshell uploads
Elementor Pro plugin for WordPress versions 4.2.1 and earlier. Affects sites with published Elementor Pro Form widgets containing File Upload fields. Over 6 million active installations globally.
criticalbug_reportVulnerabilityCisco NX-OS RCE vulnerability requires immediate patching
Cisco NX-OS operating system. Specific affected versions not disclosed in available information. Impacts Nexus switches and potentially other devices running NX-OS.
criticalbug_reportVulnerabilityCritical vulnerabilities in HPE Aruba OS-CX and FabricComposer require patching
HPE Aruba products: Aruba OS-CX (network switch operating system) and Aruba FabricComposer (data center fabric management). Specific affected versions not disclosed in available information.
criticalbug_reportVulnerabilityCritical RCE in GeoNetwork requires immediate patching
GeoNetwork open-source catalog application. Specific affected versions not disclosed in advisory. All unpatched instances potentially vulnerable to remote code execution.
criticalbug_reportVulnerabilitySonicWall SMA 1000 SSRF flaw (CVE-2026-83548) exploited in the wild
SonicWall SMA 1000 Appliances. CVE-2026-83548 is a server-side request forgery (SSRF) vulnerability with CVSS 10.0, allowing remote unauthenticated attackers to gain unauthorized access. Specific affected versions not disclosed.