Skip to content
November 3, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Actively Exploited Vulnerabilities Added to CISA KEV Catalog actively exploited vulnerabilities Android privilege escalation flaw DELMIA Apriso RCE, CISA KEV Exploitation ServiceNow Vulnerabilities
  • Vulnerability Report

Actively Exploited Vulnerabilities Added to CISA KEV Catalog

Do Son June 3, 2026 0

CISA added new actively exploited vulnerabilities to its catalog. Learn how the Android privilege escalation flaw impacts corporate environments.

Critical Security Flaw Exposes Industrial IoT Converters USR-W610 vulnerability hardcoded administrative credentials
  • Vulnerability Report

Critical Security Flaw Exposes Industrial IoT Converters

Do Son June 3, 2026 0

A critical USR-W610 vulnerability exposes hardcoded administrative credentials. Learn how to secure your PUSR IoT converters from exploitation.

Critical Langflow RCE Vulnerability Exposes AI Workflows Langflow RCE vulnerability Shareable Playground security flaw
  • Vulnerability Report

Critical Langflow RCE Vulnerability Exposes AI Workflows

Do Son June 3, 2026 0

A critical Langflow RCE vulnerability impacts the Shareable Playground feature. Learn about the new security patches available.

Laravel CRLF Injection Vulnerability Threatens Web Applications Laravel CRLF injection vulnerability CVE-2026-48019 patch CVE-2024-13918 and CVE-2024-13919
  • Vulnerability Report

Laravel CRLF Injection Vulnerability Threatens Web Applications

Do Son June 3, 2026 0

A severe Laravel CRLF injection vulnerability exposes web apps to mail relay abuse. Apply the latest CVE-2026-48019 patch to protect your infrastructure.

Critical XCharge C6 Vulnerabilities Expose Electric Vehicle Chargers XCharge C6 vulnerabilities EV charger security flaws GNU libtasn1 Vulnerability CVE-2025-13151 Credit Card Skimmer Malware CVE-2024-13892
  • Vulnerability Report

Critical XCharge C6 Vulnerabilities Expose Electric Vehicle Chargers

Do Son June 2, 2026 0

Critical XCharge C6 vulnerabilities expose EV chargers to exploitation. Learn how recent updates address these EV charger security flaws immediately.

Critical ActiveMQ Security Flaws Threaten Enterprise Message Brokers ActiveMQ security flaws Jolokia web console exploit ActiveMQ RCE Jolokia Spring Vulnerability ActiveMQ MQTT Vulnerability CVE-2025-66168 Apache Artemis Vulnerability CVE-2026-27446
  • Vulnerability Report

Critical ActiveMQ Security Flaws Threaten Enterprise Message Brokers

Do Son June 2, 2026 0

Fix critical ActiveMQ security flaws today. Avoid a dangerous Jolokia web console exploit by upgrading your message broker immediately.

Halo Security Honored with 2026 MSP Today Product of the Year Award halo-security-msp-today-2026_1780097763dObw3SFnsr
  • Press Release

Halo Security Honored with 2026 MSP Today Product of the Year Award

cybernewswire June 2, 2026 0
Miami Beach, FL, USA, 2nd June 2026, CyberNewswire
Read More Read more about Halo Security Honored with 2026 MSP Today Product of the Year Award
Kirki Plugin Vulnerability: 150K WordPress Sites Face Critical 9.8 CVSS Privilege Escalation in the Wild Kirki plugin vulnerability WordPress account takeover
  • Vulnerability Report

Kirki Plugin Vulnerability: 150K WordPress Sites Face Critical 9.8 CVSS Privilege Escalation in the Wild

Do Son June 2, 2026 0

An active Kirki plugin vulnerability allows a critical WordPress account takeover. Learn how this 9.8 CVSS flaw impacts 150,000 active websites.

BlackToad Threat Actors Deploy Stealthy Phishing Lures Remcos RAT phishing campaign Network blackout technique
  • Cybercriminals

BlackToad Threat Actors Deploy Stealthy Phishing Lures

Do Son June 2, 2026 0

A novel Remcos RAT phishing campaign utilizes a network blackout technique to evade defense systems. Learn how to protect your enterprise network.

Sophisticated SilentCryptoMiner Variant Delivered via Fake Plugin Overlays Miner-and-RAT
  • Malware

Sophisticated SilentCryptoMiner Variant Delivered via Fake Plugin Overlays

Do Son June 2, 2026 0

A stealthy SilentCryptoMiner variant uses a fake plugin update to infect systems. Protect your enterprise from this advanced cryptocurrency miner.

Fake RVTools Installer Deploys Modular Python RAT Fake RVTools installer Modular Python RAT
  • Malware

Fake RVTools Installer Deploys Modular Python RAT

Do Son June 2, 2026 0

A fake RVTools installer campaign distributes a modular Python RAT. Learn how this malware uses signed certificates to evade security controls.

Grandoreiro Banking Trojan Evades Defense via Lookalike Software TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm
  • Malware

Grandoreiro Banking Trojan Evades Defense via Lookalike Software

Do Son June 2, 2026 0

The dangerous Grandoreiro banking trojan returns. Discover how it utilizes an advanced DLL side loading technique to bypass corporate defenses.

The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach Red Hat NPM attack
  • Malware

The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach

Do Son June 2, 2026 0

Analyze the recent Red Hat NPM attack. Learn how hackers bypassed trusted publishing via GitHub Actions to deploy the Mini Shai-Hulud worm.

High-Severity Ivanti ITSM Vulnerability Exposes IT Systems Ivanti EPMM security updates Ivanti ITSM vulnerability authenticated privilege escalation Ivanti Xtraction vulnerability CVE-2026-8043 Ivanti EPM RCE, SQL Injection Ivanti EPM, remote code execution CVE-2024-50330 - CVE-2025-0282 and CVE-2025-0283
  • Vulnerability Report

High-Severity Ivanti ITSM Vulnerability Exposes IT Systems

Do Son June 2, 2026 0

A high-severity Ivanti ITSM vulnerability is fixed. Learn how to address this authenticated privilege escalation flaw on cloud and on-premises setups.

Twill Typhoon RAT Campaign Uses DLL Side Loading to Target APJ Networks Twill Typhoon RAT campaign DLL side loading tradecraft
  • Cyber Security
  • Malware

Twill Typhoon RAT Campaign Uses DLL Side Loading to Target APJ Networks

Do Son June 2, 2026 0

A stealthy Twill Typhoon RAT campaign targets APJ organizations. Discover how this threat exploits DLL side loading tradecraft to evade security.

Apache Fesod SSRF Vulnerability Exposes Internal Networks Apache Fesod SSRF vulnerability CVE-2026-49328 patch
  • Vulnerability Report

Apache Fesod SSRF Vulnerability Exposes Internal Networks

Do Son June 2, 2026 0

A critical Apache Fesod SSRF vulnerability has been found. Learn about the CVE-2026-49328 patch released to protect internal network resources.

The Longevity Gambit: AMD Extends AM5 and Reshapes the Silicon Landscape AMD AM5 platform support AMD Embedded Processors Vulnerabilities
  • Technology

The Longevity Gambit: AMD Extends AM5 and Reshapes the Silicon Landscape

Do Son June 2, 2026 0

Discover the latest AMD AM5 platform support updates. Learn how Team Red enables cost-effective desktop upgrades for future Ryzen processors.

Critical KMW CCTV Vulnerability Exposes Live Surveillance Feeds KMW CCTV vulnerability unauthenticated password reset Xiongmai IP Camera Vulnerability CVE-2025-65856 CVE-2024-8956 (CVSS 9.1): PTZOptics Cameras
  • Vulnerability Report

Critical KMW CCTV Vulnerability Exposes Live Surveillance Feeds

Do Son June 2, 2026 0

A critical KMW CCTV vulnerability allows an unauthenticated password reset. Secure your surveillance cameras and patch your firmware immediately.

Anthropic Approaches IPO: The Leap to Public Capital Anthropic confidential IPO filing Anthropic Google $200 billion deal Anthropic Mythos Preview Anthropic Pentagon blacklist Claude Max 20x open-source Model Distillation Anthropic vs DeepSeek Claude Free tier update 2026
  • Technology

Anthropic Approaches IPO: The Leap to Public Capital

Do Son June 2, 2026 0

Explore the Anthropic confidential IPO filing details. Learn about the firm's $965B valuation, Claude's growth, and upcoming Wall Street debut.

Critical Fleet Security Vulnerabilities Threaten Multi-Tenant Clusters Fleet security vulnerabilities cross namespace secret disclosure Rancher, GitOps Rancher Fleet Critical Vulnerability CVE-2026-41050
  • Vulnerability Report

Critical Fleet Security Vulnerabilities Threaten Multi-Tenant Clusters

Do Son June 2, 2026 0

Multiple Fleet security vulnerabilities expose private environments to cross namespace secret disclosure and SSRF attacks. Patch your systems now.

Severe Casdoor Identity Platform Flaws Expose Corporate Networks Casdoor authentication bypass flaws cross organization privilege escalation
  • Vulnerability Report

Severe Casdoor Identity Platform Flaws Expose Corporate Networks

Do Son June 2, 2026 0

Critical Casdoor authentication bypass flaws allow cross organization privilege escalation. Learn how to secure your identity infrastructure today.

Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released Android zero day flaw June 2026 security bulletin RuTaxi Trojan Android Banking Malware Pixel 9 zero-click exploit, Dolby UDC vulnerability CVE-2025-54957 NexusRoute Android RAT, India E-Challan Phishing ClayRat Self-Defense, Android Accessibility Abuse Android Trojan, AntiDot Android Malware "BadPack"
  • Android
  • Vulnerability Report

Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released

Do Son June 2, 2026 0

Google patches a critical Android zero day flaw in the June 2026 security bulletin. Learn how to secure your device from active exploitation now.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-79589CVSS 9.8
    The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows...
    📅 Updated: Nov 3, 2026
  • CVE-2026-61567CVSS 10.0
    AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an attacker-named streamer in `webSiteRootURL`,...
    📅 Updated: Nov 3, 2026
  • CVE-2026-107029CVSS 9.1
    Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data...
    📅 Updated: Nov 3, 2026
  • CVE-2026-120447CVSS 9.2
    HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS login...
    📅 Updated: Nov 2, 2026
  • CVE-2023-29073CVSS 9.8
    A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause...
    📅 Updated: Nov 2, 2026
  • CVE-2023-29074CVSS 9.8
    A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause...
    📅 Updated: Nov 2, 2026
  • CVE-2026-77526CVSS 9.9
    ## Summary `FacturaScripts\Core\UploadedFile::move($destiny, $destinyName)` concatenates `$destiny` and `$destinyName` without normalizing the resulting path. Every caller in the codebase...
    📅 Updated: Nov 2, 2026
  • CVE-2026-45262CVSS 9.9
    ## Summary > **Live PoC verified 2026-04-30** against a stock FacturaScripts master at `127.0.0.1:8081`. A scoped `ApiKey` with...
    📅 Updated: Nov 2, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.