The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of…
A maximum-severity vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231, is now being actively exploited in the wild, just days after SAP…
Threat actors have begun exploiting a newly disclosed Microsoft SharePoint vulnerability, CVE-2026-55040 (CVSS 9.1), following the public release of a proof-of-concept (PoC)…
Threat actors are actively exploiting a critical directory-traversal vulnerability in Broadcom's VMware vCenter, tracked as CVE-2026-59310 (CVSS 9.8), to gain persistent remote…
A critical remote code execution vulnerability in Microsoft SharePoint Server, CVE-2026-50522 (CVSS 9.8), is being actively exploited in the wild following the…
Threat actors are actively exploiting a critical security flaw in the ServiceNow AI Platform, identified as CVE-2026-6875, which carries a CVSS score…
A critical security flaw in Oracle E-Business Suite, tracked as CVE-2026-46817 (CVSS 9.8), is now actively exploited in the wild. The vulnerability,…
Threat actors are actively exploiting three security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. The flaws include CVE-2026-39813…
Threat actors have begun exploiting a critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition…
Defused Cyber, along with Previdian, warned of active exploitation attempts targeting CVE-2026-8452 in Citrix NetScaler ADC and Gateway.