CVE-2025-9316: N-Central Unauthenticated SessionID Generation Vulnerability
CVE-2025-9316 is a critical vulnerability in N-central allowing unauthenticated sessionID generation, exploited by MuddyWater.
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The…
CVE-2026-40139 — Critical vulnerability brief
CVSS 9.2A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated…
CVE-2026-48611 — Vulnerability brief
CVE-2026-48611 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-20896: Critical Gitea Docker Authentication Bypass Vulnerability
CVE-2026-20896 is a critical vulnerability (CVSS 9.8) in Gitea Docker images that allows unauthenticated attackers to bypass authentication by sending a crafted…
CVE-2025-54068: Laravel Livewire Remote Code Execution Vulnerability
CVE-2025-54068 is a critical remote code execution vulnerability in Laravel Livewire exploited by MuddyWater.
CVE-2026-55958 — Vulnerability brief
CVE-2026-55958 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-55960 — Vulnerability brief
CVE-2026-55960 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-55961 — Vulnerability brief
CVE-2026-55961 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-20215 — Vulnerability brief
CVE-2026-20215 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…