Vulnerability News

Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware

Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a researcher recording successful attacks against…

5 hours ago

37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released

A proof-of-concept exploit that gains root access on OpenBSD by chaining two kernel flaws. The main bug dates back about…

3 days ago

iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro

Security researchers from the cybersecurity firm Calif demonstrated a working untethered jailbreak for iOS 27.0.1 on Apple’s newest iPhone 18…

3 days ago

BeyondTrust 0-Day Vulnerability Exploited Since August to Gain Full Admin Access in Minutes

A critical zero-day vulnerability in BeyondTrust Remote Support was exploited in late August, weeks before the company disclosed the flaw…

3 days ago

CISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency has added a high-severity Palo Alto Networks PAN-OS vulnerability to its Known Exploited…

3 days ago

Critical Linux Kernel Flaw Lets Attackers Escape Virtual Machines and Take Control of Hosts

A critical flaw in the Linux kernel may allow an attacker-controlled virtual machine (VM) to breach its isolation boundary and…

3 days ago

Critical ChatGPT GitHub Connector Flaw Could Allow Attackers to Steal Private Repository Secrets

A critical flaw in ChatGPT’s GitHub integration has the potential to turn a routine repository review into a secret-theft attack.…

4 days ago

Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems

Citrix has disclosed four XenServer vulnerabilities, including three that could let a malicious user with elevated rights inside a virtual…

4 days ago

Critical Next.js Vulnerabilities Allow Hackers to Execute Malicious Code Remotely

Next.js has released security updates for two critical vulnerabilities that could let remote attackers run malicious code without logging in.…

4 days ago

PoC Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability

A public proof-of-concept (PoC) for CVE-2026-35616, a critical authentication and authorization bypass in Fortinet FortiClient Endpoint Management Server (EMS), lets…

4 days ago