Technology ❯ Cybersecurity ❯ Vulnerabilities

Command Injection

CVE-2026-20245 Authentication Bypass Trend Micro Apex One CVE-2025-59689 Array Networks AG Series D-Link Routers CVE-2026-3854 CVE-2026-42271 Fortinet FortiWeb OpenAI Codex

Arista Patches Actively Exploited CVE-2026-16812 in VeloCloud Orchestrator

Unauthenticated remote command execution through internet‑reachable VCO web interfaces can expose device credentials and management data.

Zimbra Issues Urgent Patch for Critical SNMP Command Injection

Ubiquiti Issues Patches for Seven Critical UniFi Flaws

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

Mirai Botnet Actively Exploits Year-Old Flaw in Retired D-Link DIR-823X Routers

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

Zyxel Patches Critical UPnP Flaw Enabling Remote Code Execution Across Many Routers

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

Active Attacks Target Critical Vulnerability in Legacy D-Link DSL Routers

JPCERT Confirms Active Exploitation of Array Networks AG Gateways via DesktopDirect Flaw

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Fortinet Confirms Second FortiWeb Flaw Under Active Attack as CISA Demands Rapid Fixes

TP-Link Patches Critical Omada Gateway Flaws Enabling Remote Code Execution

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

Libraesva Rushes Patch for ESG Flaw Exploited by Suspected State Actor

Critical SAP S/4HANA CVE-2025-42957 Now Exploited in the Wild

CISA Lists Two N-able N-central Flaws as Actively Exploited

Fortinet Issues FortiSIEM Patches After Discovery of Stealthy Exploit Code