CVE-2026-40140 — Vulnerability brief
CVE-2026-40140 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-48282 — Adobe ColdFusion Path Traversal Vulnerability
Adobe ColdFusion Path Traversal Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
CVE-2026-48908 — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
CVSS 10JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with…
CVE-2026-55255 — Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow Authorization Bypass Through User-Controlled Key Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
CVE-2026-56290 — Joomlack Page Builder Improper Access Control Vulnerability
CVSS 10Joomlack Page Builder Improper Access Control Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
CVE-2026-53359: Januscape KVM Shadow-MMU Issue
Januscape is a separate KVM/x86 shadow-MMU vulnerability disclosed by Hyunwoo Kim in July 2026, as covered by The Hacker News. It is…
CVE-2026-46316: ITScape KVM/arm64 Escape
ITScape is a KVM/arm64 escape vulnerability published in June 2026, also discovered by Hyunwoo Kim. It is part of his series of…
CVE-2026-46113 — Vulnerability brief
CVE-2026-46113 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
16-Year-Old Linux KVM Flaw Januscape (CVE-2026-53359) Enables Guest-to-Host Escape on Intel and AMD
A critical use-after-free vulnerability in the Linux Kernel-based Virtual Machine (KVM) hypervisor, tracked as CVE-2026-53359 and named 'Januscape', allows a guest virtual…
CVE-2025-52691: SmarterMail Remote Code Execution Vulnerability
CVE-2025-52691 is a critical remote code execution vulnerability in SmarterMail exploited by MuddyWater in reconnaissance campaigns.