Skip to content
September 28, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
BabbleLoader: The Polyglot Malware Evading Both Traditional and AI Defenses BabbleLoader malware
  • Malware

BabbleLoader: The Polyglot Malware Evading Both Traditional and AI Defenses

Do Son November 18, 2024 0
Read More Read more about BabbleLoader: The Polyglot Malware Evading Both Traditional and AI Defenses
CVE-2024-31141: Apache Kafka Vulnerability Exposes User Data to Potential Attackers Kafka Authentication Bypass JWT Signature Validation Apache Kafka - CVE-2024-27309 & CVE-2024-31141
  • Vulnerability

CVE-2024-31141: Apache Kafka Vulnerability Exposes User Data to Potential Attackers

Do Son November 18, 2024 0
Read More Read more about CVE-2024-31141: Apache Kafka Vulnerability Exposes User Data to Potential Attackers
Critical Vulnerabilities Found in Baxter Life2000 Ventilation System WAGO, vulnerability, industrial automation BlockBlasters, Steam malware Baxter Life2000 Ventilation System - CVE-2024-48966
  • Vulnerability

Critical Vulnerabilities Found in Baxter Life2000 Ventilation System

Do Son November 18, 2024 0
Read More Read more about Critical Vulnerabilities Found in Baxter Life2000 Ventilation System
DNS Predators Exploit “Sitting Ducks” Attack to Hijack Domains and Expand Cyber Operation Sitting Ducks attack
  • Cyber Security

DNS Predators Exploit “Sitting Ducks” Attack to Hijack Domains and Expand Cyber Operation

Do Son November 18, 2024 0
Read More Read more about DNS Predators Exploit “Sitting Ducks” Attack to Hijack Domains and Expand Cyber Operation
CVE-2024-0012 and CVE-2024-9474: Actively Exploited Vulnerabilities Impact Palo Alto Networks PAN-OS CVE-2024-9474
  • Vulnerability

CVE-2024-0012 and CVE-2024-9474: Actively Exploited Vulnerabilities Impact Palo Alto Networks PAN-OS

Do Son November 18, 2024 0
Read More Read more about CVE-2024-0012 and CVE-2024-9474: Actively Exploited Vulnerabilities Impact Palo Alto Networks PAN-OS
“Water Barghest” Botnet Hijacks 20,000 IoT Devices for Profit Mozi Botnet AI bots
  • Malware

“Water Barghest” Botnet Hijacks 20,000 IoT Devices for Profit

Do Son November 18, 2024 0
Read More Read more about “Water Barghest” Botnet Hijacks 20,000 IoT Devices for Profit
Critical Vulnerabilities in Citrix Virtual Apps and Desktops Actively Exploited CVE-2024-8068 & CVE-2024-8069 - Citrix Session Recording Manager
  • Vulnerability

Critical Vulnerabilities in Citrix Virtual Apps and Desktops Actively Exploited

Do Son November 18, 2024 0
Read More Read more about Critical Vulnerabilities in Citrix Virtual Apps and Desktops Actively Exploited
Introducing Shadow Dumper: A Powerful Tool for LSASS Memory Extraction LSASS Memory
  • Open Source Tool

Introducing Shadow Dumper: A Powerful Tool for LSASS Memory Extraction

Do Son November 17, 2024 0
Read More Read more about Introducing Shadow Dumper: A Powerful Tool for LSASS Memory Extraction
PoC Exploit Releases for Zero-Day CVE-2024-47575 Flaw in Fortinet FortiManager CVE-2024-47575 PoC exploit
  • Vulnerability

PoC Exploit Releases for Zero-Day CVE-2024-47575 Flaw in Fortinet FortiManager

Do Son November 17, 2024 0
Read More Read more about PoC Exploit Releases for Zero-Day CVE-2024-47575 Flaw in Fortinet FortiManager
WezRat: The Modular Infostealer Weaponized by Iranian Cyber Group Emennet Pasargad WezRat malware
  • Cyber Security
  • Malware

WezRat: The Modular Infostealer Weaponized by Iranian Cyber Group Emennet Pasargad

Do Son November 17, 2024 0
Read More Read more about WezRat: The Modular Infostealer Weaponized by Iranian Cyber Group Emennet Pasargad
Sonatype Nexus Repository 2 Hit By RCE (CVE-2024-5082) and XSS (CVE-2024-5083) Flaws Nexus Repository RCE Supply Chain Security Nexus Repository Manager - CVE-2024-5082 & CVE-2024-5083
  • Vulnerability

Sonatype Nexus Repository 2 Hit By RCE (CVE-2024-5082) and XSS (CVE-2024-5083) Flaws

Do Son November 17, 2024 0
Read More Read more about Sonatype Nexus Repository 2 Hit By RCE (CVE-2024-5082) and XSS (CVE-2024-5083) Flaws
SafePay Ransomware: A New Threat with Sophisticated Techniques SafePay ransomware
  • Malware

SafePay Ransomware: A New Threat with Sophisticated Techniques

Do Son November 17, 2024 0
Read More Read more about SafePay Ransomware: A New Threat with Sophisticated Techniques
Chinese Threat Actor SilkSpecter Exploits Black Friday Frenzy with Sophisticated Phishing Campaign SilkSpecter Exploits Black Friday
  • Cyber Security

Chinese Threat Actor SilkSpecter Exploits Black Friday Frenzy with Sophisticated Phishing Campaign

Do Son November 17, 2024 0
Read More Read more about Chinese Threat Actor SilkSpecter Exploits Black Friday Frenzy with Sophisticated Phishing Campaign
PostgreSQL Releases Security Update Addressing Multiple Vulnerabilities PostgreSQL Security Update 2026 PostgreSQL CVE-2026-6637 Patch CVE-2024-10979 PostgreSQL vulnerability
  • Vulnerability

PostgreSQL Releases Security Update Addressing Multiple Vulnerabilities

Do Son November 17, 2024 0
Read More Read more about PostgreSQL Releases Security Update Addressing Multiple Vulnerabilities
CVE-2024-10217 & CVE-2024-10218: TIBCO Hawk Faces Critical Security Risks TIBCO Operational Intelligence Hawk - CVE-2024-10217 & CVE-2024-10218
  • Vulnerability

CVE-2024-10217 & CVE-2024-10218: TIBCO Hawk Faces Critical Security Risks

Do Son November 17, 2024 0
Read More Read more about CVE-2024-10217 & CVE-2024-10218: TIBCO Hawk Faces Critical Security Risks
PXA Stealer: New Malware Targets Governments and Education Across Europe and Asia PXA Stealer
  • Cyber Security
  • Malware

PXA Stealer: New Malware Targets Governments and Education Across Europe and Asia

Do Son November 17, 2024 0
Read More Read more about PXA Stealer: New Malware Targets Governments and Education Across Europe and Asia
Apache Traffic Server Patches Critical Vulnerabilities in Latest Release Apache Traffic Server - CVE-2024-50306
  • Vulnerability

Apache Traffic Server Patches Critical Vulnerabilities in Latest Release

Do Son November 17, 2024 0
Read More Read more about Apache Traffic Server Patches Critical Vulnerabilities in Latest Release
Glove Stealer Malware Bypasses Chrome Encryption, Steals Sensitive Data Glove Stealer
  • Malware

Glove Stealer Malware Bypasses Chrome Encryption, Steals Sensitive Data

Do Son November 17, 2024 0
Read More Read more about Glove Stealer Malware Bypasses Chrome Encryption, Steals Sensitive Data
CVE-2024-8856: WP Time Capsule Plugin Vulnerability Exposes 20,000+ Sites to TakeOver Backup and Staging - CVE-2024-8856
  • Vulnerability

CVE-2024-8856: WP Time Capsule Plugin Vulnerability Exposes 20,000+ Sites to TakeOver

Do Son November 16, 2024 0
Read More Read more about CVE-2024-8856: WP Time Capsule Plugin Vulnerability Exposes 20,000+ Sites to TakeOver
Two-Step Phishing Technique Leveraging Microsoft Visio Files Exposed by Researchers two-step phishing technique
  • Cyber Security

Two-Step Phishing Technique Leveraging Microsoft Visio Files Exposed by Researchers

Do Son November 16, 2024 0
Read More Read more about Two-Step Phishing Technique Leveraging Microsoft Visio Files Exposed by Researchers
CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs Airflow Credential Leak, UI Redaction Failure CVE-2024-39877 & CVE-2024-45784 Airflow Connection Leak, CVE-2025-54831
  • Vulnerability

CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs

Do Son November 16, 2024 0
Read More Read more about CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs
Zero-Day Vulnerability in FortiClient Exploited by BrazenBamboo APT BrazenBamboo - DEEPPOST malware
  • Cyber Security
  • Malware
  • Vulnerability

Zero-Day Vulnerability in FortiClient Exploited by BrazenBamboo APT

Do Son November 15, 2024 0
Read More Read more about Zero-Day Vulnerability in FortiClient Exploited by BrazenBamboo APT
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
  • CVE-2026-88771
    Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
  • CVE-2026-65660CVSS 8.8
    Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
    Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
  • CVE-2026-5430CVSS 10.0
    The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-71362CVSS 9.1
    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-48842CVSS 8.1
    Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-87902
    Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
    Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 23, 2026
  • CVE-2026-94127CVSS 9.8
    When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-101894CVSS 9.1
    The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API relies...
    📅 Updated: Sep 28, 2026
  • CVE-2026-101891CVSS 9.3
    An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker...
    📅 Updated: Sep 28, 2026
  • CVE-2026-86102CVSS 9.3
    An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access...
    📅 Updated: Sep 28, 2026
  • CVE-2026-100721CVSS 9.5
    vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with...
    📅 Updated: Sep 28, 2026
  • CVE-2026-101081CVSS 9.4
    A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the...
    📅 Updated: Sep 28, 2026
  • CVE-2026-100684CVSS 9.2
    Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server. In sso.authenticate,...
    📅 Updated: Sep 28, 2026
  • CVE-2026-63374CVSS 9.3
    AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or...
    📅 Updated: Sep 28, 2026
  • CVE-2026-101075CVSS 10.0
    A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of...
    📅 Updated: Sep 28, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.