Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit called LegacyHive, targeting a Windows User Profile Service (ProfSvc) arbitrary…
CVE-2026-57092 is a remote code execution vulnerability in Windows VMSwitch with a CVSS score of 9.9, the highest in the July 2026…
CVE-2026-54117 is a remote code execution vulnerability in SQL Server with a CVSS score of 8.8. It is one of a pair…
CVE-2026-54118 is a remote code execution vulnerability in SQL Server with a CVSS score of 8.8. It is one of a pair…
Microsoft shipped its largest Patch Tuesday on record, addressing 622 CVEs, more than triple the previous high. Two zero-days are under active…
A vulnerability in the Smart Install feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…
PageBuilder CK is a Joomla page builder extension affected by CVE-2026-56290, an improper access control vulnerability allowing remote code execution. The issue…
A suspected China-aligned threat activity cluster tracked as UNK_MassTraction by Proofpoint has been exploiting critical Roundcube webmail vulnerabilities to target physics and…