Cve
Curated coverage and analysis in this editorial area.
CVE-2026-76268: Unauthenticated RCE in Splunk Enterprise Patroni REST API
A critical CVSS 9.8 flaw in the Patroni component of Splunk Enterprise allows attackers with internal network access to execute system…
Zimbra CVE-2026-73570: Unauthenticated RCE Exploited Before Patch
CVE-2026-73570 enables unauthenticated remote code execution on Zimbra servers via log injection into Swatchdog. Microsoft observed ac…
Microsoft Issues Out-of-Band Patch for CVE-2026-96940 in Exchange Server
CVE-2026-96940 carries a CVSS 8.8 score and allows an authenticated attacker to access other users' mailboxes. Microsoft released an e…
CVE-2026-91826: RCE in Samsung rlottie Library Creates Supply-Chain Risk
A stack-based buffer overflow in Samsung's open-source rlottie library allows remote code execution via crafted vector animations. The…
Gitea CVE-2026-60004: Real-World Victim Reports CPU Spike and Dropper
A Russian sysadmin documented an attack on their self-hosted Gitea instance via CVE-2026-60004. Hosting provider HOSTKEY flagged susta…
Citrix NetScaler in the Crosshairs: Pre-Auth RCE via SAML Heap Overflow, Likely CVE-2026-8452
WatchTowr Labs has reverse-engineered a critical pre-authentication remote code execution flaw in Citrix NetScaler ADC/Gateway. The vu…
7-Zip 26.00: Any .zip File Can Trigger the Most Severe Heap Overflow Yet
CVE-2026-48095 is a heap overflow in 7-Zip's NTFS parser caused by undefined behavior in a 32-bit shift. An apparently harmless archiv…
CISA Orders 3-Day Patch Deadline for CVE-2026-18577 in N-able N-central
CISA added CVE-2026-18577 to its Known Exploited Vulnerabilities catalog with a three-day patching deadline for federal agencies. The…
Adobe ColdFusion: 10 Critical CVEs With In-the-Wild RCE, Forced Update
Adobe patched 10 ColdFusion vulnerabilities, including CVE-2026-48282 with a CVSS 10.0 score and confirmed exploitation. The legacy RD…
NGINX Rift: Active Exploitation of CVE-2026-42945 Detected In the Wild
In-the-wild attacks targeting CVE-2026-42945 (NGINX Rift) began on May 16, 2026. Security researchers analyze the critical heap buffer…
CVE-2026-44338: Working Exploit Scanner for PraisonAI Deployed in Under 4 Hours
The first automated scanner targeting PraisonAI was detected less than four hours after the disclosure of CVE-2026-44338. The authenti…
CVE-2026-41940: Global Campaign Targets cPanel Authentication Bypass to Deploy Cross-Platform Backdoors
Threat actor Mr_Rot13 is actively exploiting CVE-2026-41940 in cPanel/WHM to deploy the 'Filemanager' backdoor. With over 2,000 IPs in…