|
Patch now: WordPress Core “wp2shell” chain (CVE-2026-60137, CVE-2026-63030)
|
|
0
|
42
|
July 20, 2026
|
|
Linux kernel privilege-escalation bugs touch cloud and industrial systems: what’s confirmed
|
|
0
|
34
|
June 27, 2026
|
|
FFmpeg patches “PixelSmash” in MagicYUV: what users of media apps should know
|
|
0
|
11
|
June 23, 2026
|
|
Recycle Bin delete prompts are showing the wrong names after June’s Windows updates, but your files are fine
|
|
0
|
22
|
June 22, 2026
|
|
Windows 11 26H2 is a light, predictable update arriving this fall
|
|
0
|
169
|
June 22, 2026
|
|
CVE-2026-35273: Critical unauthenticated RCE risk in Oracle PeopleSoft PeopleTools
|
|
0
|
140
|
June 22, 2026
|
|
CVE-2026-10557: Hard‑coded MQTT credentials expose Yarbo robot telemetry and commands
|
|
0
|
25
|
June 22, 2026
|
|
CVE-2026-54420: Active exploitation of LiteSpeed’s cPanel plugin and what hosting admins should do now
|
|
0
|
22
|
June 22, 2026
|
|
CVE-2026-50656 “RoguePlanet” in Microsoft Defender: what’s known and how to prepare
|
|
0
|
43
|
June 22, 2026
|
|
ShapedPlugin supply-chain compromise: backdoored Pro updates via official channels (CVE-2026-10735)
|
|
0
|
11
|
June 22, 2026
|
|
Active exploits hit Gravity SMTP (CVE-2026-4020); Avada Builder critical bug patched (CVE-2026-8713)
|
|
0
|
24
|
June 22, 2026
|
|
Anthropic disables Fable 5 and Mythos 5 after U.S. export control directive
|
|
0
|
7
|
June 13, 2026
|
|
CVE-2026-10795: Authentication bypass in UpdraftPlus impacts sites connected to UpdraftCentral
|
|
0
|
38
|
June 12, 2026
|
|
Notepad++ path traversal bypass can execute commands without a prompt (CVE-2026-52884)
|
|
0
|
16
|
June 12, 2026
|
|
Windows 11’s Low Latency Profile arrives with June’s update: what it changes and how to turn it on
|
|
0
|
48
|
June 12, 2026
|
|
Microsoft patches actively exploited Exchange Server zero-day (CVE-2026-42897)
|
|
0
|
6
|
June 10, 2026
|
|
CVE-2026-3300: Active exploits target Everest Forms Pro’s Complex Calculation feature
|
|
0
|
114
|
June 6, 2026
|
|
Compromised npm Packages Abuse Hugging Face as Exfiltration Infrastructure
|
|
0
|
9
|
June 4, 2026
|
|
CVE-2025-48595: Android integer overflow bug patched in June 2026
|
|
0
|
17
|
June 2, 2026
|
|
CVE-2026-8206: Password reset flaw in Kirki plugin could enable account takeover
|
|
0
|
11
|
June 2, 2026
|
|
Critical auth bypass in Burst Statistics plugin puts 200,000 WordPress sites at risk
|
|
0
|
9
|
June 2, 2026
|
|
CVE-2026-8732: WP Maps Pro flaw enables unauthenticated admin account creation
|
|
0
|
13
|
June 2, 2026
|
|
Windows 11 May Be Silently Causing Micro-Stutters in Your Games
|
|
0
|
114
|
May 30, 2026
|
|
CVE-2026-9082: Drupal’s PostgreSQL SQL injection is being probed — update your sites
|
|
0
|
19
|
May 30, 2026
|
|
Microsoft pulls back the floating Copilot button in Office, lets you put it back on the ribbon
|
|
0
|
99
|
May 24, 2026
|
|
Ubiquiti UniFi OS critical fixes: CVE-2026-33000 and related flaws
|
|
0
|
12
|
May 22, 2026
|
|
Google briefly exposed details of an unfixed Chromium bug that can keep background scripts alive
|
|
0
|
116
|
May 22, 2026
|
|
ScadaBR 1.2.0 flagged by CISA for four serious flaws (CVE-2026-8602 through CVE-2026-8605)
|
|
0
|
23
|
May 21, 2026
|
|
Microsoft Defender CVEs: CVE-2026-41091 (local privilege escalation) and CVE-2026-45498 (denial of service)
|
|
0
|
19
|
May 21, 2026
|
|
CVE-2026-42897: Exchange Server XSS exploited against Outlook on the web — mitigation via EEMS
|
|
0
|
13
|
May 15, 2026
|