Vulnerability Report Archives • Page 7 of 106 • Daily CyberSecurity

Australia Warns of Hackers Exploiting TeamCity Flaw, PoC Public TeamCity CVE-2026-63077 unauthenticated remote code execution vulnerability exploited in the wild with public proof-of-concept

TeamCity CVE-2026-63077 unauthenticated remote code execution vulnerability exploited in the wild with public proof-of-concept

Australia Warns of Hackers Exploiting TeamCity Flaw, PoC Public

Do Son August 24, 2026

Attackers are actively targeting JetBrains TeamCity servers in the wild. The TeamCity CVE-2026-63077 vulnerability allows unauthenticated remote...

CVE-2026-52912: Linux Kernel Root Exploit PoC Disclosed CVE-2026-52912 Linux kernel privilege escalation use-after-free flaw in netfilter nf_queue with public root exploit PoC

CVE-2026-52912 Linux kernel privilege escalation use-after-free flaw in netfilter nf_queue with public root exploit PoC

CVE-2026-52912: Linux Kernel Root Exploit PoC Disclosed

Do Son August 24, 2026

TL;DR CVE-2026-52912 is a use-after-free flaw in the Linux kernel’s netfilter nf_queue code. It carries a CVSS...

CVE-2026-19478: GitLab Flaw Exploited in the Wild, PoC Public GitLab CVE-2026-19478 critical vulnerability warning showing unauthenticated attackers delete public projects exploited in the wild

GitLab CVE-2026-19478 critical vulnerability warning showing unauthenticated attackers delete public projects exploited in the wild

CVE-2026-19478: GitLab Flaw Exploited in the Wild, PoC Public

Do Son August 23, 2026

GitLab has patched a critical flaw that lets unauthenticated attackers delete public projects and user data. The...

EverShop CVE-2026-72843 Flaw Allows Unauthenticated Account Takeover Diagram showing the EverShop account takeover flow and eCommerce platform vulnerability mechanism.

Diagram showing the EverShop account takeover flow and eCommerce platform vulnerability mechanism.

EverShop CVE-2026-72843 Flaw Allows Unauthenticated Account Takeover

Do Son August 23, 2026

A critical flaw in the EverShop software allows complete unauthenticated account takeover attacks. Tracked as CVE-2026-72843, this...

CVE-2026-77806: SPIP Unauthenticated RCE Exploited in the Wild as Public Exploit Lands SPIP CVE-2026-77806 unauthenticated remote code execution vulnerability exploited in the wild public exploit patch 4.4.21

SPIP CVE-2026-77806 unauthenticated remote code execution vulnerability exploited in the wild public exploit patch 4.4.21

CVE-2026-77806: SPIP Unauthenticated RCE Exploited in the Wild as Public Exploit Lands

Do Son August 21, 2026

TL;DR CVE-2026-77806 is a CVSS 9.8 unauthenticated RCE in the SPIP CMS. It affects all versions before...

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched

Do Son August 21, 2026

TL;DR VMware disclosed four Spring vulnerabilities on August 20, 2026. All rate as HIGH severity. One hits...

CVE-2026-75501: Public PoC for Calix Router Flaw That Bypasses NAT and Firewall Protections Calix GS7 XGS router CVE-2026-75501 UPnP missing authentication flaw bypass NAT and firewall protections public PoC

Calix GS7 XGS router CVE-2026-75501 UPnP missing authentication flaw bypass NAT and firewall protections public PoC

CVE-2026-75501: Public PoC for Calix Router Flaw That Bypasses NAT and Firewall Protections

Do Son August 21, 2026

TL;DR CVE-2026-75501 is a missing authentication flaw in the Calix GS7 XGS GS5239XG router. Its UPnP service...

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-19598 is a CVSS 9.8 privilege escalation flaw in the Pods WordPress plugin. It lets unauthenticated...

CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts Apache CloudStack CVE-2026-50112 remote code execution vulnerability on KVM hypervisor host security release advisory

Apache CloudStack CVE-2026-50112 remote code execution vulnerability on KVM hypervisor host security release advisory

CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts

Do Son August 21, 2026

TL;DR Apache CloudStack shipped releases 4.20.3.1 and 4.22.1.1. They fix 20 CVEs across the platform. The most...

IBM AIX Vulnerabilities: Remote Code Execution Flaws Hit CVSS 9.9 IBM AIX vulnerabilities remote code execution CVSS 9.9 security patch chart

IBM AIX Vulnerabilities: Remote Code Execution Flaws Hit CVSS 9.9

Do Son August 21, 2026

TL;DR IBM patched a large batch of IBM AIX vulnerabilities on August 15, 2026. Many allow remote...

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code

Do Son August 21, 2026

TL;DR A uutils coreutils vulnerability affects the stdbuf tool in the Rust rewrite of GNU coreutils. By...

RDK-B WebUI Vulnerabilities Let Attackers Bypass Login RDK-B WebUI vulnerabilities authentication bypass CVE-2026-19505 broadband gateway diagram

RDK-B WebUI vulnerabilities authentication bypass CVE-2026-19505 broadband gateway diagram

RDK-B WebUI Vulnerabilities Let Attackers Bypass Login

Do Son August 21, 2026

TL;DR CERT/CC disclosed five RDK-B WebUI vulnerabilities on August 19, 2026. The worst flaw lets a remote,...

CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak Keycloak account takeover CVE-2026-18963 unauthenticated password reset flaw diagram

Keycloak account takeover CVE-2026-18963 unauthenticated password reset flaw diagram

CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak

Do Son August 21, 2026

TL;DR Keycloak 26.7.2 fixes five flaws, released on August 19, 2026. The most severe, CVE-2026-18963, allows a...

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA

Do Son August 21, 2026

TL;DR Red Hat disclosed three high-severity flaws that enable privilege escalation. The worst, CVE-2026-67567 (CVSS 9.9), hits...

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites

Do Son August 21, 2026

TL;DR CVE-2026-32475 is a CVSS 9.8 unauthenticated arbitrary file upload flaw in Elementor Pro. It affects an...

CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild SPIP CVE-2026-77647 unauthenticated remote code execution vulnerability exploited in the wild patch 4.4.20

SPIP CVE-2026-77647 unauthenticated remote code execution vulnerability exploited in the wild patch 4.4.20

CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-77647 is a CVSS 9.8 unauthenticated remote code execution flaw in the SPIP CMS. It affects...

CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways TP-Link Omada gateway CVE-2026-19586 pre-authentication OS command injection vulnerability advisory OpenVPN Server

TP-Link Omada gateway CVE-2026-19586 pre-authentication OS command injection vulnerability advisory OpenVPN Server

CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways

Do Son August 21, 2026

TL;DR TP-Link patched three Omada gateway vulnerabilities. The most severe, CVE-2026-19586, is a pre-authentication OS command injection...

CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw Microsoft Entra ID remote code execution vulnerability CVE-2026-69836 CVSS 10 exploited in the wild advisory

Microsoft Entra ID remote code execution vulnerability CVE-2026-69836 CVSS 10 exploited in the wild advisory

CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw

Do Son August 21, 2026

Update: Microsoft updated its safety alert on August 21, 2026. Initially, the report marked the bug as...

CVE-2026-59270: Spring Security LDAP Flaw Lets Attackers Read or Modify Directory Entries Spring Security vulnerabilities advisory showing CVE-2026-59270 embedded LDAP flaw exposing in-memory directory entries

Spring Security vulnerabilities advisory showing CVE-2026-59270 embedded LDAP flaw exposing in-memory directory entries

CVE-2026-59270: Spring Security LDAP Flaw Lets Attackers Read or Modify Directory Entries

Do Son August 21, 2026

TL;DR VMware disclosed four Spring Security vulnerabilities. The most severe, CVE-2026-59270, rates CVSS 9.4 (CRITICAL). Its embedded...

CVE-2026-77176: Kata Containers Flaw Mounts Arbitrary Guest Rootfs Paths CVE-2026-77176 Kata Containers genpolicy vulnerability mounting arbitrary guest rootfs paths in Confidential Containers

CVE-2026-77176 Kata Containers genpolicy vulnerability mounting arbitrary guest rootfs paths in Confidential Containers

CVE-2026-77176: Kata Containers Flaw Mounts Arbitrary Guest Rootfs Paths

Do Son August 21, 2026

TL;DR CVE-2026-77176 is a CVSS 8.1 flaw in Kata Containers genpolicy. A malicious operator can mount arbitrary...

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation

Do Son August 21, 2026

TL;DR A researcher published proof-of-concept exploit code for CVE-2026-52929, a Linux kernel SCTP flaw rated CVSS 7.5....

Spring GraphQL vulnerabilities security advisory dashboard showing CVE-2026-59285 remote code execution

Spring GraphQL Vulnerabilities: Seven Flaws Patched, One Enables RCE

Do Son August 20, 2026

TL;DR VMware disclosed seven Spring GraphQL vulnerabilities and related Spring Cloud flaws on August 20, 2026. All...

Critical Alert 4 Active Exploits Detected Today