Technology ❯ Cybersecurity ❯ Vulnerabilities

Command Injection

CVE-2026-20245 CVE-2024-20418 LG Smart TVs CVE-2024-3400 Array AG Series VPN N-able N-Central FortiSIEM SAP S/4HANA CVE-2025-42957 D-Link DCS-2530L and DCS-2670L Trend Micro Apex One Array Networks AG Series CVE-2025-59689 Authentication Bypass CVE-2026-0625 D-Link Routers TP-Link Omada Fortinet FortiWeb Fortinet CVE-2025-11953 CVE-2025-64328 CVE-2025-13942 TP-Link Routers OpenAI Codex CVE-2026-3854 CVE-2025-29635 CVE-2026-41411 SNMP Monitoring CVE-2026-42271 CVE-2026-50746 CVE-2026-16812 Progress Kemp LoadMaster Security Incidents CVE-2026-77554 CVE-2026-88771

Arista Patches Actively Exploited CVE-2026-16812 in VeloCloud Orchestrator

Unauthenticated remote command execution through internet‑reachable VCO web interfaces can expose device credentials and management data.

Zimbra Issues Urgent Patch for Critical SNMP Command Injection

Ubiquiti Issues Patches for Seven Critical UniFi Flaws

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

Mirai Botnet Actively Exploits Year-Old Flaw in Retired D-Link DIR-823X Routers

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

Zyxel Patches Critical UPnP Flaw Enabling Remote Code Execution Across Many Routers

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

Active Attacks Target Critical Vulnerability in Legacy D-Link DSL Routers

JPCERT Confirms Active Exploitation of Array Networks AG Gateways via DesktopDirect Flaw

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Fortinet Confirms Second FortiWeb Flaw Under Active Attack as CISA Demands Rapid Fixes

TP-Link Patches Critical Omada Gateway Flaws Enabling Remote Code Execution

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

Libraesva Rushes Patch for ESG Flaw Exploited by Suspected State Actor

Critical SAP S/4HANA CVE-2025-42957 Now Exploited in the Wild

CISA Lists Two N-able N-central Flaws as Actively Exploited

Fortinet Issues FortiSIEM Patches After Discovery of Stealthy Exploit Code