GitLab CVE-2026-19478 Actively Exploited Within Days of Disclosure
A newly disclosed critical vulnerability in GitLab, tracked as CVE-2026-19478 (CVSS 9.4), is already being actively exploited in the wild, according to…
Tag: watchTowr
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Two critical vulnerabilities in open-source platforms are under active exploitation, according to independent reports from watchTowr and VulnCheck. The first, CVE-2026-64849 (CVSS…
Unpatched GeoServer Zero-Day Actively Exploited, Could Lead to Remote Code Execution
A newly disclosed zero-day vulnerability in GeoServer is being actively exploited in the wild, according to threat intelligence firm watchTowr. The flaw,…
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
A critical remote code execution vulnerability in Microsoft SharePoint Server, CVE-2026-50522 (CVSS 9.8), is being actively exploited in the wild following the…
Progress Urges ShareFile Customers to Shut Down Storage Zone Controllers Amid Credible Security Threat
Progress Software has instructed ShareFile customers to immediately shut down Windows servers running Storage Zone Controllers in response to a credible external…
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Citrix has released security updates to address six vulnerabilities in NetScaler ADC and NetScaler Gateway, including flaws that could allow arbitrary file…
watchTowr: Exposure Management and Vulnerability Research
watchTowr is a preemptive exposure management firm that identified active exploitation of CVE-2026-19478 in its honeypot network. The company emphasizes the accelerating…