CVE-2026-49777: Critical Supply Chain Vulnerability in Product Slider Pro for WooCommerce
CVE-2026-49777 is a critical vulnerability in the Product Slider Pro for WooCommerce plugin from ShapedPlugin, with a CVSS score of 10.0. It…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-10735: Supply Chain Compromise of ShapedPlugin WordPress Plugins
CVE-2026-10735 is a high-severity vulnerability (CVSS 9.8) covering the entire supply chain incident affecting multiple ShapedPlugin Pro plugins. Attackers compromised the vendor's…
CVE-2026-4891: Vulnerability in dnsmasq
One of six vulnerabilities discovered in dnsmasq as part of OpenAI's Daybreak initiative.
CVE-2026-4892: Vulnerability in dnsmasq
One of six vulnerabilities discovered in dnsmasq as part of OpenAI's Daybreak initiative.
CVE-2026-5172: Vulnerability in dnsmasq
One of six vulnerabilities discovered in dnsmasq as part of OpenAI's Daybreak initiative.
CVE-2026-8390: WebAssembly Vulnerability in Mozilla Firefox
A WebAssembly vulnerability in Mozilla Firefox discovered as part of OpenAI's Daybreak initiative.
CVE-2026-47729 — Vulnerability brief
CVE-2026-47729 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-4890: Vulnerability in dnsmasq
One of six vulnerabilities discovered in dnsmasq as part of OpenAI's Daybreak initiative.
Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Threat actors have begun exploiting a critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition…
CISA Warns Critical Lantronix EDS5000 Flaw CVE-2025-67038 Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of a critical vulnerability in Lantronix EDS5000…