Skip to content
October 6, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
CVE-2025-27363: Font Library FreeType Flaw Exploited in the Wild, Millions at Risk CVE-2025-27363
  • Vulnerability

CVE-2025-27363: Font Library FreeType Flaw Exploited in the Wild, Millions at Risk

Do Son March 11, 2025 0
Read More Read more about CVE-2025-27363: Font Library FreeType Flaw Exploited in the Wild, Millions at Risk
Zoom Addresses Multi High-Severity Vulnerabilities in Workplace Apps and SDKs Zoom Node Vulnerability CVE-2026-22844 CVE-2024-45421 & CVE-2024-45419 CVE-2025-27440
  • Vulnerability

Zoom Addresses Multi High-Severity Vulnerabilities in Workplace Apps and SDKs

Do Son March 11, 2025 0
Read More Read more about Zoom Addresses Multi High-Severity Vulnerabilities in Workplace Apps and SDKs
Critical Flaw Exposes 100,000+ WooCommerce Sites: Unauthenticated File Inclusion Threatens Total Takeover CVE-2025-1661
  • Vulnerability

Critical Flaw Exposes 100,000+ WooCommerce Sites: Unauthenticated File Inclusion Threatens Total Takeover

Do Son March 11, 2025 0
Read More Read more about Critical Flaw Exposes 100,000+ WooCommerce Sites: Unauthenticated File Inclusion Threatens Total Takeover
Zyxel Patches Multi Vulnerabilities in DSL/Ethernet CPE, Fiber ONT, and WiFi Extender Devices CVE-2023-22920 - CVE-2024-11253, CVE-2024-12009, and CVE-2024-12010
  • Vulnerability

Zyxel Patches Multi Vulnerabilities in DSL/Ethernet CPE, Fiber ONT, and WiFi Extender Devices

Do Son March 11, 2025 0
Read More Read more about Zyxel Patches Multi Vulnerabilities in DSL/Ethernet CPE, Fiber ONT, and WiFi Extender Devices
DuckDuckGo Unleashes Duck.ai: Free and Private AI-Powered Chat for Everyone DuckDuckGo AI chatbot
  • Technology

DuckDuckGo Unleashes Duck.ai: Free and Private AI-Powered Chat for Everyone

Do Son March 11, 2025 0
Read More Read more about DuckDuckGo Unleashes Duck.ai: Free and Private AI-Powered Chat for Everyone
From Desktop to Mobile: Thunderbird Expands its Reach with Upcoming iOS App Thunderbird for iOS Thunderbird Exchange Native EWS Support
  • Technology

From Desktop to Mobile: Thunderbird Expands its Reach with Upcoming iOS App

Do Son March 11, 2025 0
Read More Read more about From Desktop to Mobile: Thunderbird Expands its Reach with Upcoming iOS App
Microsoft Patch Tuesday (March 2025) Addresses 67 Vulnerabilities, Including Seven Zero-Day Flaws Microsoft Patch Tuesday May 2026 Netlogon RCE CVE-2026-41089 SharePoint Exploit Patch Tuesday Windows DWM Zero-Day CVE-2026-21519 CVE-2024-49039 Microsoft Patch Tuesday March 2025
  • Vulnerability
  • Windows

Microsoft Patch Tuesday (March 2025) Addresses 67 Vulnerabilities, Including Seven Zero-Day Flaws

Do Son March 11, 2025 0
Read More Read more about Microsoft Patch Tuesday (March 2025) Addresses 67 Vulnerabilities, Including Seven Zero-Day Flaws
SideWinder APT Group: Maritime & Nuclear Targets, Evolved Malware SideWinder group
  • Cyber Security

SideWinder APT Group: Maritime & Nuclear Targets, Evolved Malware

Do Son March 11, 2025 0
Read More Read more about SideWinder APT Group: Maritime & Nuclear Targets, Evolved Malware
$405 Million Forfeited: Texas Pharmacist’s Fraudulent Compound Cream Scheme Exposes Vulnerabilities in Healthcare Systems EU Education Scams, .edu.eu Domain App Store security Refund Schemes - Texas Pharmacist's Fraudulent
  • Cyber Security

$405 Million Forfeited: Texas Pharmacist’s Fraudulent Compound Cream Scheme Exposes Vulnerabilities in Healthcare Systems

Do Son March 11, 2025 0
Read More Read more about $405 Million Forfeited: Texas Pharmacist’s Fraudulent Compound Cream Scheme Exposes Vulnerabilities in Healthcare Systems
CVE-2025-26865: Apache OFBiz Vulnerability Could Lead to Remote Code Execution CVE-2022-25371 - CVE-2025-26865 Apache OFBiz RCE Vulnerability CVE-2026-45434 Authentication Bypass
  • Vulnerability

CVE-2025-26865: Apache OFBiz Vulnerability Could Lead to Remote Code Execution

Do Son March 11, 2025 0
Read More Read more about CVE-2025-26865: Apache OFBiz Vulnerability Could Lead to Remote Code Execution
North Korean Cyber Espionage Group Kimsuky Exploits University Website in Watering Hole Attack North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack
  • Cyber Security

North Korean Cyber Espionage Group Kimsuky Exploits University Website in Watering Hole Attack

Do Son March 11, 2025 0
Read More Read more about North Korean Cyber Espionage Group Kimsuky Exploits University Website in Watering Hole Attack
CVE-2025-24201: Apple Issues Emergency Patches for Actively Exploited Zero-Day Vulnerability Apple Background Security CVE-2026-20643 Apple Background Security Improvement Apple Backdoor Apple Lawsuit, Data Exfiltration CVE-2024-44131 - CVE-2025-24118 PoC
  • Vulnerability

CVE-2025-24201: Apple Issues Emergency Patches for Actively Exploited Zero-Day Vulnerability

Do Son March 11, 2025 0
Read More Read more about CVE-2025-24201: Apple Issues Emergency Patches for Actively Exploited Zero-Day Vulnerability
CVE-2025-27494 (CVSS 9.1):Critical Flaw Found in Siemens SiPass Access Control Systems Siemens Edge Vulnerability CVE-2025-40805 CVE-2024-32741 - CVE-2025-27494 Siemens, Industrial Edge, CVE-2024-54092
  • Vulnerability

CVE-2025-27494 (CVSS 9.1):Critical Flaw Found in Siemens SiPass Access Control Systems

Do Son March 11, 2025 0
Read More Read more about CVE-2025-27494 (CVSS 9.1):Critical Flaw Found in Siemens SiPass Access Control Systems
Beware of “Cheats” and “Cracks”: DCRat Backdoor Lurks on YouTube DCRat backdoor
  • Malware

Beware of “Cheats” and “Cracks”: DCRat Backdoor Lurks on YouTube

Do Son March 11, 2025 0
Read More Read more about Beware of “Cheats” and “Cracks”: DCRat Backdoor Lurks on YouTube
VPN No More: Xbox Targets Gamers Buying Games from Cheaper Regions AI controversy, Xbox layoffs Xbox ban VPN Microsoft Layoffs, Xbox Gaming Cuts
  • Technology

VPN No More: Xbox Targets Gamers Buying Games from Cheaper Regions

Do Son March 11, 2025 0
Read More Read more about VPN No More: Xbox Targets Gamers Buying Games from Cheaper Regions
SAP Patches High-Severity XSS and Authorization Flaws in Latest Security Updates SAP Security Patch May 2026 CVE-2026-34260 S/4HANA CVE-2024-22127 - CVE-2025-27434 SAP Solution Manager Code Injection, Critical SAP Patch
  • Vulnerability

SAP Patches High-Severity XSS and Authorization Flaws in Latest Security Updates

Do Son March 11, 2025 0
Read More Read more about SAP Patches High-Severity XSS and Authorization Flaws in Latest Security Updates
Ghost Plugin Plagues Over a Million Terminals, Hijacking Search Results and User Data Ghost Plugin
  • Malware

Ghost Plugin Plagues Over a Million Terminals, Hijacking Search Results and User Data

Do Son March 10, 2025 0
Read More Read more about Ghost Plugin Plagues Over a Million Terminals, Hijacking Search Results and User Data
CVE-2025-24813 Flaw in Apache Tomcat Exposes Servers to RCE, Data Leaks: Update Immediately CVE-2024-21733 - CVE-2025-24813
  • Vulnerability

CVE-2025-24813 Flaw in Apache Tomcat Exposes Servers to RCE, Data Leaks: Update Immediately

Do Son March 10, 2025 0
Read More Read more about CVE-2025-24813 Flaw in Apache Tomcat Exposes Servers to RCE, Data Leaks: Update Immediately
CVE-2025-27816 (CVSS 9.8): Critical Vulnerability in Veritas InfoScale Could Allow RCE Veritas Enterprise Vault server CVE-2025-27816
  • Vulnerability

CVE-2025-27816 (CVSS 9.8): Critical Vulnerability in Veritas InfoScale Could Allow RCE

Do Son March 10, 2025 0
Read More Read more about CVE-2025-27816 (CVSS 9.8): Critical Vulnerability in Veritas InfoScale Could Allow RCE
CVE-2024-56325 (CVSS 9.8): Authentication Bypass Vulnerability Discovered in Apache Pinot CVE-2024-56325 Apache Pinot vulnerability
  • Vulnerability

CVE-2024-56325 (CVSS 9.8): Authentication Bypass Vulnerability Discovered in Apache Pinot

Do Son March 10, 2025 0
Read More Read more about CVE-2024-56325 (CVSS 9.8): Authentication Bypass Vulnerability Discovered in Apache Pinot
DDoS Strikes X: Cloudflare Saves Platform, Dark Storm Suspected TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm
  • Cyber Security

DDoS Strikes X: Cloudflare Saves Platform, Dark Storm Suspected

Do Son March 10, 2025 0
Read More Read more about DDoS Strikes X: Cloudflare Saves Platform, Dark Storm Suspected
EByte Ransomware: A New Go-Based Threat with Advanced Encryption Techniques Ebyte Ransomware
  • Malware

EByte Ransomware: A New Go-Based Threat with Advanced Encryption Techniques

Do Son March 10, 2025 0
Read More Read more about EByte Ransomware: A New Go-Based Threat with Advanced Encryption Techniques
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-42415CVSS 9.3
    Unauthenticated SQL Injection in Porto Theme - Functionality
    📅 Updated: Oct 6, 2026
  • CVE-2026-42417CVSS 9.3
    Unauthenticated SQL Injection in ARMember Premium
    📅 Updated: Oct 6, 2026
  • CVE-2026-41555CVSS 9.3
    Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email
    📅 Updated: Oct 6, 2026
  • CVE-2026-39795CVSS 9.3
    Unauthenticated SQL Injection in SendPress Newsletters
    📅 Updated: Oct 6, 2026
  • CVE-2026-39797CVSS 9.8
    Unauthenticated PHP Object Injection in GDPR Framework By Data443
    📅 Updated: Oct 6, 2026
  • CVE-2026-39785CVSS 9.3
    Unauthenticated SQL Injection in Gmedia Photo Gallery
    📅 Updated: Oct 6, 2026
  • CVE-2026-39770CVSS 10.0
    Unauthenticated Arbitrary File Upload in Doctreat
    📅 Updated: Oct 6, 2026
  • CVE-2026-39773CVSS 10.0
    Unauthenticated Privilege Escalation in Doctreat Core
    📅 Updated: Oct 6, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.