CVE-2020-22653: Vulnerability in Ruckus Wireless Routers
CVE-2020-22653 is a known vulnerability in unpatched Ruckus wireless routers that is weaponized by UAT-7810 in attack chains to compromise devices and…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2020-22658: Vulnerability in Ruckus Wireless Routers
CVE-2020-22658 is a known vulnerability in unpatched Ruckus wireless routers that is weaponized by UAT-7810 in attack chains to compromise devices and…
CVE-2023-25717: Vulnerability in Ruckus Wireless Routers
CVE-2023-25717 is a known vulnerability in unpatched Ruckus wireless routers that is weaponized by UAT-7810 in attack chains to compromise devices and…
CVE-2025-2492: Vulnerability in ASUS AiCloud Routers
CVE-2025-2492 is a vulnerability in ASUS AiCloud Routers that is exploited by UAT-7810 in campaigns observed earlier this year to broaden their…
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…
15-Year-Old GhostLock Linux Kernel Flaw Enables Root Access and Container Escape
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel vulnerability that allows any logged-in user to gain full root…
CVE-2026-43499: GhostLock Linux Kernel Futex Flaw Provides Root Access
A Linux kernel futex vulnerability, dubbed GhostLock, is used as the second stage of the IonStack exploit chain to escalate privileges to…
Crash Bug Introduced by GhostLock Patch
CVE-2026-53166 is a separate crash bug introduced by the initial fix for GhostLock (CVE-2026-43499). The cleanup was still being finalized in early…
CVE-2026-10702 — Vulnerability brief
CVE-2026-10702 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Rogue Agent Flaw in Google Dialogflow CX Could Let Attackers Hijack AI Chatbots
A critical vulnerability in Google's Dialogflow CX, dubbed 'Rogue Agent' by security firm Varonis, could have allowed an attacker with edit permissions…