|
ShapedPlugin supply-chain compromise: backdoored Pro updates via official channels (CVE-2026-10735)
|
|
0
|
10
|
June 22, 2026
|
|
Active exploits hit Gravity SMTP (CVE-2026-4020); Avada Builder critical bug patched (CVE-2026-8713)
|
|
0
|
24
|
June 22, 2026
|
|
Anthropic disables Fable 5 and Mythos 5 after U.S. export control directive
|
|
0
|
6
|
June 13, 2026
|
|
CVE-2026-10795: Authentication bypass in UpdraftPlus impacts sites connected to UpdraftCentral
|
|
0
|
34
|
June 12, 2026
|
|
Notepad++ path traversal bypass can execute commands without a prompt (CVE-2026-52884)
|
|
0
|
15
|
June 12, 2026
|
|
Windows 11’s Low Latency Profile arrives with June’s update: what it changes and how to turn it on
|
|
0
|
46
|
June 12, 2026
|
|
Microsoft patches actively exploited Exchange Server zero-day (CVE-2026-42897)
|
|
0
|
5
|
June 10, 2026
|
|
CVE-2026-3300: Active exploits target Everest Forms Pro’s Complex Calculation feature
|
|
0
|
113
|
June 6, 2026
|
|
Compromised npm Packages Abuse Hugging Face as Exfiltration Infrastructure
|
|
0
|
7
|
June 4, 2026
|
|
CVE-2025-48595: Android integer overflow bug patched in June 2026
|
|
0
|
13
|
June 2, 2026
|
|
CVE-2026-8206: Password reset flaw in Kirki plugin could enable account takeover
|
|
0
|
9
|
June 2, 2026
|
|
Critical auth bypass in Burst Statistics plugin puts 200,000 WordPress sites at risk
|
|
0
|
9
|
June 2, 2026
|
|
CVE-2026-8732: WP Maps Pro flaw enables unauthenticated admin account creation
|
|
0
|
11
|
June 2, 2026
|
|
Windows 11 May Be Silently Causing Micro-Stutters in Your Games
|
|
0
|
112
|
May 30, 2026
|
|
CVE-2026-9082: Drupal’s PostgreSQL SQL injection is being probed — update your sites
|
|
0
|
19
|
May 30, 2026
|
|
Microsoft pulls back the floating Copilot button in Office, lets you put it back on the ribbon
|
|
0
|
98
|
May 24, 2026
|
|
Ubiquiti UniFi OS critical fixes: CVE-2026-33000 and related flaws
|
|
0
|
12
|
May 22, 2026
|
|
Google briefly exposed details of an unfixed Chromium bug that can keep background scripts alive
|
|
0
|
115
|
May 22, 2026
|
|
ScadaBR 1.2.0 flagged by CISA for four serious flaws (CVE-2026-8602 through CVE-2026-8605)
|
|
0
|
21
|
May 21, 2026
|
|
Microsoft Defender CVEs: CVE-2026-41091 (local privilege escalation) and CVE-2026-45498 (denial of service)
|
|
0
|
19
|
May 21, 2026
|
|
CVE-2026-42897: Exchange Server XSS exploited against Outlook on the web — mitigation via EEMS
|
|
0
|
12
|
May 15, 2026
|
|
CVE-2026-43500: Linux rxrpc shared‑fragment bug tied to “Dirty Frag” page‑cache writes
|
|
0
|
124
|
May 14, 2026
|
|
SAP patches critical Commerce Cloud RCE and S/4HANA SQL injection (CVE-2026-34263, CVE-2026-34260)
|
|
0
|
114
|
May 14, 2026
|
|
CVE-2026-42945: NGINX rewrite-module bug tied to PCRE captures and “?” in replacements
|
|
0
|
19
|
May 13, 2026
|
|
Claude Code CVE-2026-39861: symlink-assisted sandbox escape fixed
|
|
0
|
18
|
May 13, 2026
|
|
CVE-2026-43284: Linux fixes an ESP decryption flaw tied to “Dirty Frag” reports
|
|
0
|
162
|
May 11, 2026
|
|
Ivanti EPMM updates address multiple flaws (CVE-2026-5786/5787/5788/6973/7821)
|
|
0
|
17
|
May 10, 2026
|
|
CVE-2026-43284: Fix for in‑place decryption on shared skb fragments in Linux’s ESP path
|
|
0
|
154
|
May 10, 2026
|
|
CVE-2026-26956: vm2 sandbox escape in 3.10.4 enables host code execution, patch available
|
|
0
|
152
|
May 7, 2026
|
|
Critical cPanel Vulnerability CVE-2026-41940 Actively Exploited: What Website Owners and Hosting Providers Need to Know
|
|
0
|
153
|
May 4, 2026
|