Five Critical WordPress Flaws Enable Site Takeover and RCE
Five critical WordPress flaws expose sites to administrator takeover or server code execution, prompting urgent plugin and theme updates for operators.
Read more →Vulnerabilities
Latest articles in Vulnerabilities
PaperCut Zero-Day Attacks Trigger Emergency Patches
PaperCut confirms active zero-day attacks on all NG and MF versions, releases emergency patches, and urges administrators to restrict server access now.
Read more →
Zimbra CVE-2026-73570 Attacks Compromise 274 Servers
Active exploitation of Zimbra flaw CVE-2026-73570 has compromised 274 servers. Administrators should patch and inspect systems for malicious files now.
Read more →
Exploited Zimbra CVE-2026-73570 Exposes Email Servers
Actively exploited Zimbra flaw CVE-2026-73570 enables unauthenticated command execution on exposed email servers. Administrators should patch and investigate.
Read more →
Microsoft Corrects Entra ID CVE-2026-69836 Exploit Claim
Microsoft corrected CVE-2026-69836 records to say the critical Entra ID flaw was not exploited and is fully mitigated with no customer action needed today.
Read more →
CISA Warns of Exploited MLflow CVE-2026-64849 SSRF Flaw
CISA warns attackers are exploiting critical MLflow SSRF flaw CVE-2026-64849, putting internal services and cloud metadata at risk worldwide. Patch now.
Read more →
SAP Commerce Cloud CVE-2026-58231 Targeted in Attacks
Exploitation attempts now target CVE-2026-58231, a CVSS 10 SAP Commerce Cloud flaw allowing unauthenticated remote code execution. Patch systems immediately.
Read more →
VMware vCenter CVE-2026-59310 Exploited in Global Attacks
Attackers are exploiting VMware vCenter flaw CVE-2026-59310 to deploy reverse SSH access, with more than 360 victim IPs observed across 47 countries worldwide.
Read more →
SharePoint CVE-2026-55040 Exploited After Public PoC
Attackers are testing SharePoint CVE-2026-55040 after a public PoC exposed a critical authentication bypass. Microsoft patches are available right now.
Read more →
Zoom Annotation Flaws Enable Zero-Click Remote Code Execution
Zoom patched three annotation flaws that could enable remote code execution or denial of service across Workplace, Rooms, VDI and Meeting SDK clients.
Read more →