…Once inside, the attackers can target a package-update endpoint with CVE-2026-34910, passing unvalidated user input into a shell command to execute arbitrary commands on the system. The injected commands…
Ubiquiti patches three max severity UniFi OS vulnerabilities By Sergiu Gatlan May 22, 2026 08:00 AM Ubiquiti has released security updates to patch three maximum severity vulnerabilities in UniFi OS that…
…Max severity Sentry flaw allows code execution as root By Sergiu Gatlan June 10, 2026 02:26 AM Security software company Ivanti has released patches to address two critical vulnerabilities in its…
Adobe patches seven max severity ColdFusion, Campaign flaws By Sergiu Gatlan July 1, 2026 03:34 AM Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app…
New Veeam vulnerability exposes backup servers to RCE attacks By Sergiu Gatlan June 9, 2026 10:27 AM Veeam has released security updates to patch a critical Backup & Replication security flaw that…
Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks By Lawrence Abrams June 10, 2026 02:31 PM Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters…
…critical" before releasing patches and confirming that exploitation attempts had been detected in the wild . "Since CVE-2026-9082 was released, Imperva has observed over 15,000 attack attempts targeting almost 6…
Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges By Lawrence Abrams June 9, 2026 07:11 PM A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just…
…By Sergiu Gatlan May 22, 2026 09:39 AM Japanese cybersecurity software company Trend Micro has addressed an Apex One zero-day vulnerability exploited in attacks targeting Windows systems. Apex One is…
…Bill Toulas June 12, 2026 01:03 PM More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. A…