Skip to content
October 30, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Cisco Patches 18 Secure Firewall Flaws, Several Root RCE Cisco Secure Firewall vulnerabilities patched in September 2026, including critical root remote code execution flaws in FMC, ASA, and FTD software
  • Vulnerability Report

Cisco Patches 18 Secure Firewall Flaws, Several Root RCE

Do Son September 17, 2026 0

Cisco patched 18 Secure Firewall vulnerabilities in FMC, ASA, and FTD, including critical unauthenticated root remote code execution flaws. Update now.

T-Mobile 5G Box Vulnerabilities Require Urgent Action Diagram of T-Mobile 5G Box vulnerabilities showing authentication bypass
  • Vulnerability Report

T-Mobile 5G Box Vulnerabilities Require Urgent Action

Do Son September 17, 2026 0

Patch the critical T-Mobile 5G Box vulnerabilities today. Learn how WNC router flaws allow auth bypass and command injection, and secure your network.

Cisco Patches Critical Cisco ISE Vulnerabilities Diagram of Cisco ISE vulnerabilities showing critical Cisco ISE vulnerabilities
  • Vulnerability Report

Cisco Patches Critical Cisco ISE Vulnerabilities

Do Son September 17, 2026 0

Cisco patched critical Cisco ISE vulnerabilities. Install updates to fix Cisco ISE vulnerabilities and prevent remote code execution and root takeovers.

Jenkins Patches 20 Plugin Flaws, Sandbox Bypasses Lead RCE Jenkins plugin vulnerabilities patched in the September 2026 advisory, including Script Security sandbox bypass flaws leading to remote code execution
  • Vulnerability Report

Jenkins Patches 20 Plugin Flaws, Sandbox Bypasses Lead RCE

Do Son September 17, 2026 0

Jenkins patched 20 plugin vulnerabilities, including 7 Script Security sandbox bypasses that allow remote code execution on the controller. Update now.

CVE-2026-76460 (CVSS 10): Cisco ISE Vulnerability Exploited in the Wild Diagram showing the exploited Cisco ISE vulnerability attack chain
  • Vulnerability Report

CVE-2026-76460 (CVSS 10): Cisco ISE Vulnerability Exploited in the Wild

Do Son September 16, 2026 0

An exploited Cisco ISE vulnerability (CVE-2026-76460) allows remote root access. Patch this critical Cisco ISE vulnerability to secure networks.

Critical Check Point Login Flaw Enables Remote Takeover Diagram showing the critical Check Point login flaw and remote exploitation
  • Vulnerability Report

Critical Check Point Login Flaw Enables Remote Takeover

Do Son September 16, 2026 0

Check Point fixed a critical Check Point login flaw (CVE-2026-91843). Patch this Check Point login flaw now to block unauthenticated remote root takeovers.

Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional Axoflow-Press_Release-Image_1_1789547766b7g5s82kIk
  • Press Release

Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional

cybernewswire September 16, 2026 0
Stamford, CT, 16th September 2026, CyberNewswire
Read More Read more about Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional
Microsoft Word Template Glitch Causes Sudden Crashes Microsoft Word error message screen displaying a sudden software crash during template generation
  • Windows

Microsoft Word Template Glitch Causes Sudden Crashes

Do Son September 16, 2026 0

Discover why Microsoft Word template crashes occur when third-party software populates documents. Learn about the Office version 2608 bug and temporary fixes.

OpenAI Expands Codex for Open Source Sponsorship Program OpenAI Codex for Open Source program banner showing ChatGPT Pro 5x benefits
  • Technology

OpenAI Expands Codex for Open Source Sponsorship Program

Do Son September 16, 2026 0

Discover how OpenAI expanded the second round of its Codex for Open Source program to 10,000 slots, offering ChatGPT Pro 5x and valuable API credits.

Critical Industrial Firmware Vulnerabilities Expose Devices Diagram of industrial firmware vulnerabilities showing authentication bypass flaws
  • Vulnerability Report

Critical Industrial Firmware Vulnerabilities Expose Devices

Do Son September 16, 2026 0

Patch critical industrial firmware vulnerabilities and authentication bypass flaws like CVE-2026-27565 in Pepperl+Fuchs, Phoenix Contact & Carlo Gavazzi.

Issabel PBX Vulnerability CVE-2026-89026 Exploited in the Wild Issabel PBX vulnerability diagram showing the Issabel PBX vulnerability exploited in attacks
  • Vulnerability Report

Issabel PBX Vulnerability CVE-2026-89026 Exploited in the Wild

Do Son September 16, 2026 0

An Issabel PBX vulnerability exploited in active attacks allows remote code execution. Patch this Issabel PBX vulnerability to secure systems.

Authorization Bypass (CVSS 8.7): Critical Octopus Server Vulnerabilities Patched Octopus Deploy addressed critical Octopus Server vulnerabilities involving a CVSS 8.7 remote code execution. Apply the security patches to prevent attacks.
  • Vulnerability Report

Authorization Bypass (CVSS 8.7): Critical Octopus Server Vulnerabilities Patched

Do Son September 16, 2026 0

Octopus Deploy addressed critical Octopus Server vulnerabilities involving a CVSS 8.7 remote code execution. Apply the security patches to prevent attacks.

SloppyRAT Malware Analyzed in Ransomware Attacks Gryxa toolkit AI-built malware diagram showing RMM abuse and crypto credential theft across 324 hosts
  • Malware

SloppyRAT Malware Analyzed in Ransomware Attacks

Do Son September 16, 2026 0

Discover how the new SloppyRAT malware uses a ClickFix infection chain to establish remote access for ransomware attacks, evading detection.

Vwork Android Malware Clones Apps in Gigabud Attacks Vwork Android malware diagram showing the Gigabud Vwork Android malware attack chain
  • Malware

Vwork Android Malware Clones Apps in Gigabud Attacks

Do Son September 16, 2026 0

Group-IB uncovered how the Gigabud Vwork Android malware chain clones apps. Discover how Vwork Android malware evades bank detection.

Casbaneiro Banking Trojan Hits Latin American Banks Diagram of the Casbaneiro banking trojan and Casbaneiro banking trojan campaign architecture
  • Malware

Casbaneiro Banking Trojan Hits Latin American Banks

Do Son September 16, 2026 0

A new Casbaneiro banking trojan campaign hits Latin America. Learn how the Casbaneiro banking trojan evades detection and targets bank logins.

Google Pixel Vulnerability CVE-2026-58704 Exploited in Targeted Attacks Diagram of Google Pixel vulnerability and Google Pixel vulnerability exploited in attacks
  • Vulnerability Report

Google Pixel Vulnerability CVE-2026-58704 Exploited in Targeted Attacks

Do Son September 16, 2026 0

A Google Pixel vulnerability exploited in targeted attacks allows privilege escalation. Update your device to patch this Google Pixel vulnerability now.

OpenAI’s Project Lily Employs Humans to Read ChatGPT Chats Project Lily workspace illustration showing contractors reviewing ChatGPT user dialogues
  • Data Leak

OpenAI’s Project Lily Employs Humans to Read ChatGPT Chats

Do Son September 16, 2026 0

Discover OpenAI Project Lily, an initiative where contractors read user ChatGPT conversations to improve responses. Explore the severe data privacy concerns.

Google Unveils Gemini Live Voice Models for Advanced Reasoning Google Gemini Live voice models handling complex tasks
  • Technology

Google Unveils Gemini Live Voice Models for Advanced Reasoning

Do Son September 16, 2026 0

Discover how Google Gemini Live voice models deliver near-instant reasoning. Learn about the dual architecture and asynchronous task capabilities.

Google Schedules “Opening Night” for the Googlebook Googlebook Opening Night event invitation highlighting Gemini Intelligence and the Glowbar design
  • Technology

Google Schedules “Opening Night” for the Googlebook

Do Son September 16, 2026 0

Google announced the Googlebook Opening Night event for October 5 in NYC. Discover the new AI flagship laptop featuring Gemini Intelligence and Android OS.

Critical Apache ZooKeeper Vulnerabilities Patched in Update Diagram of Apache ZooKeeper vulnerabilities and critical Apache ZooKeeper flaws
  • Vulnerability Report

Critical Apache ZooKeeper Vulnerabilities Patched in Update

Do Son September 16, 2026 0

Apache resolved critical Apache ZooKeeper vulnerabilities. Patch Apache ZooKeeper vulnerabilities to block unauthorized znode deletion and audit spoofing.

Google AI Now Supports Over 300 Languages Worldwide Google AI for every language supporting 300 languages with Gemini 3.5 Live Translate and sign language recognition
  • Technology

Google AI Now Supports Over 300 Languages Worldwide

Do Son September 16, 2026 0

Google AI languages now exceed 300, reaching 7 billion people with Gemini 3.5 Live Translate, offline TranslateGemma, and Pixel 11 sign-language text.

September Pixel Drop Adds VIP Widgets and Scam Alerts September 2026 Pixel Drop update showing VIP home screen widget scam detection and Pixel Watch 5
  • Android

September Pixel Drop Adds VIP Widgets and Scam Alerts

Do Son September 16, 2026 0

The September Pixel Drop adds VIP home-screen widgets, cross-app scam detection, and Wear OS 7 with offline Gemini for the Pixel Watch 5.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    Admin intel📅 Updated: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    CISA KEV📅 Added to KEV: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-94423CVSS 9.1
    Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key...
    📅 Updated: Oct 30, 2026
  • CVE-2026-93680CVSS 9.8
    IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper...
    📅 Updated: Oct 30, 2026
  • CVE-2026-90865CVSS 9.0
    An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows...
    📅 Updated: Oct 30, 2026
  • CVE-2026-90866CVSS 9.1
    A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could...
    📅 Updated: Oct 30, 2026
  • CVE-2026-90868CVSS 9.9
    An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows...
    📅 Updated: Oct 30, 2026
  • CVE-2026-89111CVSS 10.0
    The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who...
    📅 Updated: Oct 30, 2026
  • CVE-2026-90863CVSS 9.1
    Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on...
    📅 Updated: Oct 30, 2026
  • CVE-2026-90864CVSS 9.1
    A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could...
    📅 Updated: Oct 30, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.