CVE-2025-11371: Gladinet Triofox Critical Vulnerability
A critical flaw (CVSS 9.1) in Gladinet Triofox exploited by Storm-2603 for initial access in ransomware attacks. Used to probe for local…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity remote code execution vulnerability, CVE-2026-45659 (CVSS 8.8), affecting Microsoft SharePoint…
CVE-2025-55190: Argo CD API Token Credential Exposure
A flaw in Argo CD where an API token with basic read access could retrieve Git repository credentials from a project. Patched…
CVE-2026-42880: Argo CD Read-Only User Secret Exposure
A vulnerability in Argo CD allowing read-only users to read plaintext Kubernetes secrets. Patched in May 2026.
Unpatched Argo CD Repo-Server Flaw Enables Full Kubernetes Cluster Takeover
An unpatched vulnerability in the Argo CD repo-server component allows unauthenticated attackers to execute arbitrary code and potentially take over Kubernetes clusters.…
CVE-2024-31989: Argo CD Redis Cache Poisoning Vulnerability
A vulnerability in Argo CD where the Redis cache lacked authentication, allowing any pod in the cluster to poison deployment data. Fixed…
CVE-2026-58453 — Critical vulnerability brief
CVSS 9.3JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by…
CVE-2026-34106 — Critical vulnerability brief
CVSS 9.3Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec("php jobs/subtitle_rendering.php ".$login_session."…
CVE-2026-34100 — Critical vulnerability brief
CVSS 9.3Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type,…
Adobe Patches 7 Critical CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe has released critical security updates addressing multiple maximum-severity vulnerabilities in Adobe ColdFusion and Adobe Campaign Classic. The patches fix seven CVSS…