Technology ❯ Cybersecurity ❯ Vulnerabilities

CVE

Remote Code Execution CVE-2023-39780 CVE-2025-31277 Zero-Day Exploits WatchGuard Firebox CVE-2025-26625 Patch Tuesday CVE-2026-1940 CVE-2025-61728 CVE-2023-6317 Access Control Issues CVE-2025-10585 CVE-2025-69258 CVE-2025-61884 CVE-2025-53859 Kernel Vulnerabilities CVE-2025-55182 CVE-2025-68121 CVE-2021-20038 CVE-2025-9231 CVE-2025-11021 CVE-2025-30401 CVE-2024-43047 CVE-2026-4367 React MCP CVE-2013-4782 Exploit Mitigation Mozilla CVE-2025-43400 CISA NGINX CVE-2025-40538 Vulnerability Disclosure CVE-2026-34352 OpenSSL PHP Servers MITRE Corp CVE-2026-2297 Linux Kernel CVE-2025-26399 CVE-2023-6318 Active Exploitation CVE-2025-11065 Exploitation NVD Sudo Command Exploitations CVE-2014-2955 CVE-2025-59489 CVE-2025-26673 CVE-2019-6260 Oracle Identity Manager CVE-2025-10294 Packet Validation SolarWinds WHD CVE-2025-61726 CVE-2025-9230 CVE-2026-4046 CVE-2024-51978 CVE-2025-9232 D-Link Devices CVE-2025-62221 SolarWinds Web Help Desk Exploits Microsoft Affected Components Kernel Exploits CVE Foundation Cooperation Cisco D-Link DNR-322L Vulnerability Security Updates CVE-2025-48572

Critical 'NGINX Rift' Bug in Rewrite Module Exposes Servers to Remote Code Execution

Patches are available, with a simple named‑capture rewrite change offered for those unable to upgrade.

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

NIST Limits NVD CVE Enrichment to KEV, Federal Use and Critical Software

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

SolarWinds Releases Serv-U 15.5.4 to Fix Four Critical Remote Code Execution Flaws

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

OpenSSL Patches 12 Flaws Found by AISLE in Coordinated January Update

Trend Micro Patches Critical Apex Central RCE as Public Exploits Surface

Fake GitHub Exploits Are Installing Webrat, Security Firms Warn

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

React Patches CVSS 10 RCE in Server Components as Cloud Providers Deploy WAF Protections

CISA Adds WatchGuard Firewall Remote Code Execution Flaw to KEV, Sets Dec. 3 Patching Deadline

Qualys Reports Surge in Botnet Exploits Targeting PHP Servers, IoT and Cloud Gateways

Oracle Issues Out-of-Band Patch for New E‑Business Suite Flaw (CVE-2025-61884)

RondoDox Botnet Blasts 56 N-Day Flaws Across 30+ Vendors After Late-September Exploit Surge

CISA Flags Actively Exploited Sudo Flaw, Sets Oct. 20 Patch Deadline

SolarWinds Ships Third Hotfix for Critical Web Help Desk RCE Bypass

CISA Adds Actively Exploited DELMIA Apriso Flaw to KEV With Oct. 2 Fix Deadline

CISA Adds Three D-Link Router Flaws to Known Exploited Vulnerabilities Catalog

Researchers Expose OVERSTEP Rootkit on End-of-Life SonicWall VPNs