Technology ❯ Cybersecurity ❯ Vulnerabilities

Command Injection

CVE-2026-20245 Authentication Bypass Trend Micro Apex One CVE-2025-59689 Array Networks AG Series D-Link Routers CVE-2026-3854 CVE-2026-42271 Fortinet FortiWeb OpenAI Codex

Ubiquiti Issues Patches for Seven Critical UniFi Flaws

The updates close command‑injection and privilege‑escalation holes that leave many internet‑exposed UniFi systems at immediate risk.

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

Mirai Botnet Actively Exploits Year-Old Flaw in Retired D-Link DIR-823X Routers

OpenAI Fixes Codex Flaw That Let Malicious Git Branches Steal GitHub Tokens

Zyxel Patches Critical UPnP Flaw Enabling Remote Code Execution Across Many Routers

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

Active Attacks Target Critical Vulnerability in Legacy D-Link DSL Routers

JPCERT Confirms Active Exploitation of Array Networks AG Gateways via DesktopDirect Flaw

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Fortinet Confirms Second FortiWeb Flaw Under Active Attack as CISA Demands Rapid Fixes

TP-Link Patches Critical Omada Gateway Flaws Enabling Remote Code Execution

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

Libraesva Rushes Patch for ESG Flaw Exploited by Suspected State Actor

Critical SAP S/4HANA CVE-2025-42957 Now Exploited in the Wild

CISA Lists Two N-able N-central Flaws as Actively Exploited

Fortinet Issues FortiSIEM Patches After Discovery of Stealthy Exploit Code

Trend Micro Releases Mitigation Tool for Critical Apex One Zero-Days

CISA Adds Three D-Link Router Flaws to Known Exploited Vulnerabilities Catalog