CVE-2026-75784 — Critical vulnerability brief
CVSS 9.3A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-74940 — Critical vulnerability brief
CVSS 9.8Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1,…
CVE-2026-74943 — Critical vulnerability brief
CVSS 9.8Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1,…
CVE-2026-74944 — Critical vulnerability brief
CVSS 9.8Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird…
CVE-2026-74936 — Critical vulnerability brief
CVSS 9.8Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird…
CISA Adds Actively Exploited Ray Flaw to KEV Catalog: Browser-Based RCE via DNS Rebinding
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Ray, an open-source Python-native distributed computing framework, to…
CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint Weak Authentication Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability
Apple macOS Improper Authentication Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability
Broadcom VMware vCenter Path Traversal Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD…