Google Patches Exploited Chrome V8 Flaw CVE-2026-85046
Google patches actively exploited Chrome V8 flaw CVE-2026-85046 as CISA adds it to KEV, urging Windows, macOS and Linux users to update their browsers.
Read more →Vulnerabilities
Latest articles in Vulnerabilities
CISA Adds Seven Actively Exploited Flaws to KEV Catalog
CISA added seven actively exploited flaws affecting SonicWall, JFrog, Kestra and AI infrastructure, setting urgent remediation deadlines for agencies.
Read more →
PaperCut RCE Flaws Exploited as Vendor Adds New Indicators
PaperCut added new compromise indicators for exploited NG and MF RCE flaws as defenders were urged to install Release 2 and restrict server access now.
Read more →
Five Critical WordPress Flaws Enable Site Takeover and RCE
Five critical WordPress flaws expose sites to administrator takeover or server code execution, prompting urgent plugin and theme updates for operators.
Read more →
PaperCut Zero-Day Attacks Trigger Emergency Patches
PaperCut confirms active zero-day attacks on all NG and MF versions, releases emergency patches, and urges administrators to restrict server access now.
Read more →
Zimbra CVE-2026-73570 Attacks Compromise 274 Servers
Active exploitation of Zimbra flaw CVE-2026-73570 has compromised 274 servers. Administrators should patch and inspect systems for malicious files now.
Read more →
Exploited Zimbra CVE-2026-73570 Exposes Email Servers
Actively exploited Zimbra flaw CVE-2026-73570 enables unauthenticated command execution on exposed email servers. Administrators should patch and investigate.
Read more →
Microsoft Corrects Entra ID CVE-2026-69836 Exploit Claim
Microsoft corrected CVE-2026-69836 records to say the critical Entra ID flaw was not exploited and is fully mitigated with no customer action needed today.
Read more →
CISA Warns of Exploited MLflow CVE-2026-64849 SSRF Flaw
CISA warns attackers are exploiting critical MLflow SSRF flaw CVE-2026-64849, putting internal services and cloud metadata at risk worldwide. Patch now.
Read more →
SAP Commerce Cloud CVE-2026-58231 Targeted in Attacks
Exploitation attempts now target CVE-2026-58231, a CVSS 10 SAP Commerce Cloud flaw allowing unauthenticated remote code execution. Patch systems immediately.
Read more →