Skip to content
October 4, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Critical Vulnerability Discovered in Apache Pinot: Authentication Bypass Exposes Systems to Severe Risk CVE-2024-56325 Apache Pinot vulnerability
  • Vulnerability

Critical Vulnerability Discovered in Apache Pinot: Authentication Bypass Exposes Systems to Severe Risk

Do Son March 28, 2025 0
Read More Read more about Critical Vulnerability Discovered in Apache Pinot: Authentication Bypass Exposes Systems to Severe Risk
Securing the Web: Chrome’s Push for a More Robust PKI Chrome 148 lazy loading Chrome for Linux ARM64 Chrome 145 Update Chrome Security Fixes Chrome Security Update CVE-2026-1220 Chrome 144 Security Update CVE-2026-0899 Chrome Memory Safety, WebGPU UAF Chrome V8 Type Confusion, Google Updater Flaw Chrome V8 Flaw, CVE-2025-13042 Chrome V8, Type Confusion, Chrome 142 Update Chrome V8 Flaw, CVE-2025-12036 Chrome 141, WebGPU Overflow Google Chrome preloading Chrome, V8 vulnerability CVE-2025-9132 Chrome Security Update, Use-After-Free Chrome V8, Type Confusion Chrome Telemetry, Windows 10 EOL Microsoft Family Safety, Chrome Blocking Chrome Security Update, High-Severity Google Chrome, Antitrust CVE-2024-10487 and CVE-2024-10488 Google Chrome Root Program Chrome Update, CVE-2025-3619 Chrome Acquisition, Perplexity.ai
  • Technology

Securing the Web: Chrome’s Push for a More Robust PKI

Do Son March 28, 2025 0
Read More Read more about Securing the Web: Chrome’s Push for a More Robust PKI
CVE-2025-30353: Directus Vulnerability Exposes Sensitive Data in Webhook Trigger Flows CVE-2024-27295
  • Vulnerability

CVE-2025-30353: Directus Vulnerability Exposes Sensitive Data in Webhook Trigger Flows

Do Son March 28, 2025 0
Read More Read more about CVE-2025-30353: Directus Vulnerability Exposes Sensitive Data in Webhook Trigger Flows
Malware on npm “Patches” Local Packages with Reverse Shell npm reverse shell
  • Malware

Malware on npm “Patches” Local Packages with Reverse Shell

Do Son March 28, 2025 0
Read More Read more about Malware on npm “Patches” Local Packages with Reverse Shell
SnakeKeylogger: Stealthy Malware Targets Credentials in Sophisticated Attacks SnakeKeylogger
  • Malware

SnakeKeylogger: Stealthy Malware Targets Credentials in Sophisticated Attacks

Do Son March 28, 2025 0
Read More Read more about SnakeKeylogger: Stealthy Malware Targets Credentials in Sophisticated Attacks
Ghostscript Nightmare: Critical Severity Vulnerabilities Put Users at Risk CVE-2023-36664 CVE-2025-27832, CVE-2025-27831, CVE-2025-27836, and CVE-2025-27837
  • Vulnerability

Ghostscript Nightmare: Critical Severity Vulnerabilities Put Users at Risk

Do Son March 28, 2025 0
Read More Read more about Ghostscript Nightmare: Critical Severity Vulnerabilities Put Users at Risk
Classiscam Scams Surge in Central Asia, Leveraging Telegram Bots Classiscam
  • Cyber Security

Classiscam Scams Surge in Central Asia, Leveraging Telegram Bots

Do Son March 28, 2025 0
Read More Read more about Classiscam Scams Surge in Central Asia, Leveraging Telegram Bots
CHOCO TEI WATCHER mini Devices Found Vulnerable to Critical Remote Exploits, CISA Warns CHOCO TEI WATCHER vulnerability
  • Vulnerability

CHOCO TEI WATCHER mini Devices Found Vulnerable to Critical Remote Exploits, CISA Warns

Do Son March 28, 2025 0
Read More Read more about CHOCO TEI WATCHER mini Devices Found Vulnerable to Critical Remote Exploits, CISA Warns
Pakistan-Linked APT Exploits Youth Laptop Scheme in Cyberattack Targeting India Pakistan-Linked APT
  • Cyber Security

Pakistan-Linked APT Exploits Youth Laptop Scheme in Cyberattack Targeting India

Do Son March 28, 2025 0
Read More Read more about Pakistan-Linked APT Exploits Youth Laptop Scheme in Cyberattack Targeting India
CVE-2025-2857: New Firefox Sandbox Escape Emerges Following Active Exploitation of CVE-2025-2783 Firefox Klar Adjust
  • Vulnerability

CVE-2025-2857: New Firefox Sandbox Escape Emerges Following Active Exploitation of CVE-2025-2783

Do Son March 27, 2025 0
Read More Read more about CVE-2025-2857: New Firefox Sandbox Escape Emerges Following Active Exploitation of CVE-2025-2783
CVE-2025-2848: Synology Mail Server Vulnerability Allows Remote Configuration Tampering Synology Chat Server vulnerabilities Synology security update Synology DSM Update NAS Security Vulnerability Synology VPN Update SSL VPN Vulnerability Synology Telnet Flaw DSM Security Update Synology DSM Telnet vulnerability BeeStation Zero-Day, Pwn2Own RCE CVE-2024-11131 & CVE-2024-10442 CVE-2025-2848 Synology, NAS
  • Vulnerability

CVE-2025-2848: Synology Mail Server Vulnerability Allows Remote Configuration Tampering

Do Son March 27, 2025 0
Read More Read more about CVE-2025-2848: Synology Mail Server Vulnerability Allows Remote Configuration Tampering
Windows Print Glitch Fixed: KB5053657 CVE-2024-21410 KB5053657
  • Windows

Windows Print Glitch Fixed: KB5053657

Do Son March 27, 2025 0
Read More Read more about Windows Print Glitch Fixed: KB5053657
HaveIBeenPwned Creator Becomes Victim of Sophisticated Phishing HaveIBeenPwned Phishing
  • Cyber Security

HaveIBeenPwned Creator Becomes Victim of Sophisticated Phishing

Do Son March 27, 2025 0
Read More Read more about HaveIBeenPwned Creator Becomes Victim of Sophisticated Phishing
Millions at Risk: PoC Exploit Releases for Vite Arbitrary File Read Flaw (CVE-2025-30208) vite
  • Vulnerability

Millions at Risk: PoC Exploit Releases for Vite Arbitrary File Read Flaw (CVE-2025-30208)

Do Son March 27, 2025 0
Read More Read more about Millions at Risk: PoC Exploit Releases for Vite Arbitrary File Read Flaw (CVE-2025-30208)
CVE-2025-2825: Critical Vulnerability in CrushFTP Exposes Servers to Unauthenticated Access Risk CVE-2024-4040 & CVE-2025-2825
  • Vulnerability

CVE-2025-2825: Critical Vulnerability in CrushFTP Exposes Servers to Unauthenticated Access Risk

Do Son March 27, 2025 0
Read More Read more about CVE-2025-2825: Critical Vulnerability in CrushFTP Exposes Servers to Unauthenticated Access Risk
Splunk Alert: RCE and Data Leak Vulnerabilities Threaten Platforms Splunk Enterprise vulnerabilities, CVSS 9.8 flaw, CVE-2026-20253, CVE-2026-20251, CVE-2026-20258 Splunk Enterprise Vulnerabilities CVE-2026-20240 Splunk RCE CVE-2026-20204 Splunk RCE Vulnerability CVE-2026-20163 Splunk Enterprise Vulnerabilities CVE-2026-20140 Splunk Permission Flaw, Local Privilege Escalation Splunk Vulnerabilities CVE-2024-53247 - Splunk Secure Gateway App CVE-2025-20229 & CVE-2025-20231
  • Vulnerability

Splunk Alert: RCE and Data Leak Vulnerabilities Threaten Platforms

Do Son March 27, 2025 0
Read More Read more about Splunk Alert: RCE and Data Leak Vulnerabilities Threaten Platforms
Synapse Servers at Risk: Zero-Day DoS in the Wild CVE-2025-30355
  • Vulnerability

Synapse Servers at Risk: Zero-Day DoS in the Wild

Do Son March 27, 2025 0
Read More Read more about Synapse Servers at Risk: Zero-Day DoS in the Wild
CVE-2025-30232: Use-After-Free Vulnerability in Exim Exposes Systems to Privilege Escalation CVE-2023-42115 CVE 2025-30232
  • Vulnerability

CVE-2025-30232: Use-After-Free Vulnerability in Exim Exposes Systems to Privilege Escalation

Do Son March 27, 2025 0
Read More Read more about CVE-2025-30232: Use-After-Free Vulnerability in Exim Exposes Systems to Privilege Escalation
CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes CVE-2019-9874 & CVE-2019-9875
  • Vulnerability

CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes

Do Son March 27, 2025 0
Read More Read more about CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes
Researcher Drops PoC for 9.8 CVSS Ingress-NGINX CVE-2025-1974 Flaw in Kubernetes CVE-2025-1974 PoC
  • Vulnerability

Researcher Drops PoC for 9.8 CVSS Ingress-NGINX CVE-2025-1974 Flaw in Kubernetes

Do Son March 27, 2025 0
Read More Read more about Researcher Drops PoC for 9.8 CVSS Ingress-NGINX CVE-2025-1974 Flaw in Kubernetes
Triple Threat in Frappe Framework: SQL Injection, RCE, and Info Disclosure Fixed in Recent Patches Frappe Framework vulnerability
  • Vulnerability

Triple Threat in Frappe Framework: SQL Injection, RCE, and Info Disclosure Fixed in Recent Patches

Do Son March 27, 2025 0
Read More Read more about Triple Threat in Frappe Framework: SQL Injection, RCE, and Info Disclosure Fixed in Recent Patches
WordPress Plugin CVE-2025-2563 Scores 9.8, Threatens Thousands of Membership Sites CVE-2025-2563
  • Vulnerability

WordPress Plugin CVE-2025-2563 Scores 9.8, Threatens Thousands of Membership Sites

Do Son March 27, 2025 0
Read More Read more about WordPress Plugin CVE-2025-2563 Scores 9.8, Threatens Thousands of Membership Sites
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intel📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105086CVSS 9.3
    WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105089CVSS 9.3
    WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject...
    📅 Updated: Oct 4, 2026
  • CVE-2026-82042CVSS 9.3
    UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105215CVSS 9.3
    ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105211CVSS 9.2
    ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105209CVSS 9.3
    ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105207CVSS 9.3
    ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without...
    📅 Updated: Oct 4, 2026
  • CVE-2026-103355CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements...
    📅 Updated: Oct 4, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.