Vulnerability

New cPanel Vulnerability Allows Attacker to Gain Full Control of the Server

cPanel has disclosed CVE-2026-67401, a critical SQL injection flaw in EmailTrack that could let authenticated attackers gain root-level control of…

7 days ago

FortiSandbox Vulnerability Allows Attackers to Access Sensitive Information via Crafted HTTP Requests

Fortinet has disclosed a new high-severity vulnerability affecting its FortiSandbox platform, warning that unauthenticated attackers could exploit weaknesses in the…

1 week ago

CISA Warns of Chromium Type Confusion 0-Day Vulnerability Actively Exploited in Attacks

CISA has added a critical Google Chromium V8 type confusion vulnerability, tracked as CVE-2026-85046, to its Known Exploited Vulnerabilities (KEV)…

1 week ago

ConnectWise Warns of New ScreenConnect Remote Access Flaw – Released Mitigation Steps

ConnectWise has warned customers about a newly identified security issue affecting file transfer behavior in ScreenConnect Remote Access Support and…

1 week ago

Roundcube Webmail Patches 12 Security Flaws, Including Zero-Click XSS and SSRF Bypass

Roundcube Webmail has released security updates for its 1.6 LTS and 1.7 branches, fixing 12 vulnerabilities that could expose users…

1 week ago

Telerik Flaw Chain Lets Unauthenticated Attackers Turn Padding Oracle Into Remote Code Execution

Security researchers have uncovered a significant vulnerability chain in Telerik UI for ASP.NET AJAX, allowing unauthenticated attackers to execute remote…

1 week ago

Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild

Google has released an emergency Chrome security update that fixes a critical zero-day vulnerability already being exploited in real-world attacks.…

2 weeks ago

Hackers Actively Exploiting Sangoma Switchvox VoIP Platform RCE Flaw in Attacks

A critical vulnerability in Sangoma Switchvox is being actively exploited, affecting the enterprise VoIP platform used to manage business phone…

2 weeks ago

Cisco Nexus 9000 Series Switches Flaw Allows Remote Attackers to Execute Malicious Code

Cisco has disclosed a critical vulnerability in Cisco Nexus 9000 Series Switches that could allow an unauthenticated remote attacker to…

2 weeks ago

Researcher Claims CrowdStrike Falcon 0-Day Privilege Escalation Vulnerability

A security researcher known as Nightmare-Eclipse, who also goes by the names Chaotic Eclipse and MSNightmare, has released a project…

2 weeks ago