Technology ❯ Cybersecurity ❯ Vulnerabilities

Command Injection

CVE-2025-11953 OpenAI Codex Authentication Bypass CVE-2026-3854 CVE-2025-59689 Array Networks AG Series D-Link Routers Trend Micro Apex One Fortinet FortiWeb CVE-2026-0625 CVE-2025-29635 CVE-2025-13942 SAP S/4HANA FortiSIEM D-Link DCS-2530L and DCS-2670L TP-Link Routers CVE-2024-20418 CVE-2025-42957 N-able N-Central Fortinet TP-Link Omada Array AG Series VPN CVE-2025-64328 LG Smart TVs CVE-2024-3400

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

Administrators are urged to patch GitHub Enterprise Server now to block an easy-to-trigger code execution path.

Mirai Botnet Actively Exploits Year-Old Flaw in Retired D-Link DIR-823X Routers

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

Zyxel Patches Critical UPnP Flaw Enabling Remote Code Execution Across Many Routers

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

Active Attacks Target Critical Vulnerability in Legacy D-Link DSL Routers

JPCERT Confirms Active Exploitation of Array Networks AG Gateways via DesktopDirect Flaw

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Fortinet Confirms Second FortiWeb Flaw Under Active Attack as CISA Demands Rapid Fixes

TP-Link Patches Critical Omada Gateway Flaws Enabling Remote Code Execution

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

Libraesva Rushes Patch for ESG Flaw Exploited by Suspected State Actor

Critical SAP S/4HANA CVE-2025-42957 Now Exploited in the Wild

CISA Lists Two N-able N-central Flaws as Actively Exploited

Fortinet Issues FortiSIEM Patches After Discovery of Stealthy Exploit Code

Trend Micro Releases Mitigation Tool for Critical Apex One Zero-Days

CISA Adds Three D-Link Router Flaws to Known Exploited Vulnerabilities Catalog