CISA urges federal agencies to immediately patch CVE-2026-8037, an exploited remote code execution flaw in Progress ...
Microsoft’s SharePoint Server Remote Code Execution has been identified as containing a zero-day vulnerability. A zero-day is a vulnerability or security hole in a computer system unknown to its ...
Tracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution.
Federal agencies have until August 7, 2026, to remediate or disconnect assets affected by a critical vulnerability in IBM Langflow, tracked as CVE-2026-9198. This mandate follows the inclusion of the ...
JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited ...
TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could ...
A critical zero-day vulnerability in Microsoft SharePoint is being exploited in the wild right now, and more than 1,300 servers remain exposed to the public internet with no patch applied. The flaw, ...
GitHub has patched a high-severity remote code execution vulnerability that allowed anyone with push access to a private repository to run arbitrary commands on the platform’s own servers. The flaw, ...
A critical Telnet vulnerability with a CVSS rating of 9.8 enables attackers to take full control of affected systems before authentication even kicks in, security researchers at Dream Security have ...
Remote code execution vulnerabilities pose especially critical threats to organizations, and VMware’s stronghold in data centers worldwide give patching these flaws particular urgency. VMware fixed ...
A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI supply chain risks. Organizations using vulnerable versions of the Hugging ...