Showing 241–260 of 804 threats, newest first
CVE-2026-65400 is an improper authentication vulnerability in Apple macOS that allows a network-based attacker to authenticate to Screen Sharing without valid credentials. The flaw has been added to CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild. Organizations running macOS with Screen Sharing enabled face an urgent risk of unauthorized remote access.
Updated Aug 19, 2026
CVE-2026-33824 is a double free vulnerability in Microsoft's Internet Key Exchange (IKE) Service Extensions that can be exploited remotely to achieve code execution. It has been added to CISA's Known Exploited Vulnerabilities catalog with a short remediation window, indicating active or imminent exploitation in the wild.
Updated Aug 19, 2026
A critical unauthenticated remote code execution vulnerability (CVE-2026-15748) has been disclosed in Forminator Forms, a WordPress plugin installed on over 600,000 sites. The flaw allows attackers to upload malicious PHP files without authentication, potentially leading to full site compromise. Given the plugin's massive install base, this represents a high-priority patching target for WordPress site operators.
Updated Aug 18, 2026 · CVSS 9.8
Researchers at Wiz disclosed a GitHub Actions workflow injection vulnerability in Snowflake's public snowflake-connector-net repository, where a maliciously crafted GitHub issue could trigger command injection in a workflow that contained internal Jira credentials. Successful exploitation could allow an attacker to exfiltrate secrets and potentially compromise the CI/CD pipeline of a widely used Snowflake connector library.
Updated Aug 18, 2026
GitLab disclosed a critical flaw (CVE-2026-19478, CVSS 9.4) in its GraphQL API affecting both Community Edition and Enterprise Edition, allowing unauthenticated attackers to remotely modify or delete public projects and user data. Organizations running self-managed GitLab instances are urged to patch immediately to prevent destructive attacks against source code repositories.
Updated Aug 18, 2026 · CVSS 9.4
GitHub experienced a widespread outage affecting its website, API, Actions, Pull Requests, and other core services. This is a service availability incident rather than a malicious attack, but it disrupts development workflows, CI/CD pipelines, and any automated systems dependent on GitHub's infrastructure.
Updated Aug 18, 2026
Pokémon Center notified customers in the UK and Germany of a data breach involving their personal and order information, caused by a compromise at third-party logistics provider CEVA Logistics. The breach resulted in exposure of customer data and led to the cancellation of some pending orders, highlighting risks inherent in outsourced fulfillment operations.
Updated Aug 18, 2026
A threat actor claims to be selling 3.6 million employee records allegedly exfiltrated from Microsoft Azure environments belonging to multiple Fortune 500 companies. The intrusion reportedly stemmed from compromised credentials rather than a platform vulnerability, highlighting ongoing risks around identity and access management in cloud tenants. The claim remains unverified but poses significant exposure risk if confirmed.
Updated Aug 18, 2026
CISA added CVE-2025-62593, a code injection vulnerability in Ray-Project Ray, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. Federal agencies are required under BOD 26-04 to remediate this vulnerability on a prioritized basis due to its potential to grant full control of affected assets.
Updated Aug 18, 2026
A critical authentication bypass vulnerability exists in the httpcon_check_session_url function of EFM ipTIME A3004T routers (firmware 14.19.0), allowing remote attackers to circumvent session validation without credentials. A working exploit is publicly available and the vendor has not responded to disclosure, leaving affected devices permanently exposed.
Updated Aug 18, 2026 · CVSS 10
A critical unauthenticated remote code execution vulnerability exists in Edimax EW-7478APC routers running firmware 1.04, caused by a stack-based buffer overflow in the formWanTcpipSetup CGI handler. Public exploit code is available and the vendor has not responded to disclosure, meaning no patch is expected. Organizations using this device on network edges face significant risk of full device compromise and pivoting into internal networks.
Updated Aug 18, 2026 · CVSS 9.9
The Frontend Admin by DynamiApps WordPress plugin (versions up to 3.29.9) contains a critical privilege escalation vulnerability caused by a flawed authorization check that can be bypassed with a non-numeric user ID value. Attackers, in some configurations even unauthenticated, can exploit this to gain administrator access by hijacking the default admin account's password or email. Given the 9.8 CVSS score and low exploitation complexity, this vulnerability poses a severe risk to any WordPress site running the affected plugin.
Updated Aug 18, 2026 · CVSS 9.8
The ProSolution WP Client WordPress plugin (versions up to 2.0.10) contains a critical unauthenticated arbitrary file upload vulnerability that allows remote attackers to achieve remote code execution. A publicly exposed nonce combined with insufficient filename validation lets attackers bypass access controls and upload executable files directly to the server.
Updated Aug 18, 2026 · CVSS 9.8
A critical improper authentication vulnerability has been identified in the httpd component of Tenda AC10 routers running firmware 16.03.10.09_multi_TDE01, specifically within the R7WebsSecurityHandler function. The flaw allows a remote, unauthenticated attacker to bypass authentication controls, and a public exploit is already available, significantly raising the likelihood of active exploitation.
Updated Aug 18, 2026 · CVSS 9.8
CVE-2025-62593 is a code injection vulnerability in Ray-Project Ray, a widely used distributed computing framework for scaling AI/ML and Python workloads, that can lead to remote code execution. The flaw is exploitable via Firefox and Safari when developers interact with Ray's tooling, and it has been added to CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.
Updated Aug 18, 2026
Threema, a secure messaging service, suffered multiple large-scale DDoS attacks that caused severe disruptions to user communications. The attacks appear focused on service availability rather than data compromise, with no evidence of encryption bypass or user data exposure reported.
Updated Aug 17, 2026
Anthropic's Claude AI service experienced a major outage affecting multiple services, with users reporting login failures and degraded performance. This is an availability incident rather than a confirmed malicious cyberattack, though the root cause has not been publicly disclosed.
Updated Aug 17, 2026
Cryptocurrency hardware wallet vendor SafePal disclosed a data breach affecting approximately 39,798 customers after an application flaw was exploited to exfiltrate customer order information. A threat actor is now advertising the stolen data for sale on underground forums, raising risk of targeted phishing and social engineering against affected customers.
Updated Aug 17, 2026
Siemens Solid Edge SE2025 and SE2026 contain seven high-severity memory corruption vulnerabilities (CVSS 7.8) triggered when parsing specially crafted PAR, PSM, or DFT files, which could allow an attacker to crash the application or achieve arbitrary code execution in the context of the current process. Exploitation requires a user to open a malicious file, making this a local-vector, user-interaction-required threat rather than a remotely exploitable one. Siemens has released patched versions (SE2025 V225.0.15+ and SE2026 V226.0.7+) and organizations should update promptly.
Updated Aug 17, 2026 · CVSS 7.8
SiYuan, an open-source Electron-based note-taking and knowledge management application, fails to sanitize annotation fields written via the setFileAnnotation endpoint prior to v3.7.4. This allows an attacker to embed malicious markup that executes as script with full Node.js privileges when a victim opens an annotated PDF, enabling complete host compromise.
Updated Aug 17, 2026 · CVSS 9