Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CVE-2025-23042 (CVSS 9.1): Gradio Patches Critical ACL Bypass Flaw in Popular Machine Learning Platform CVE-2025-23042
  • Vulnerability

CVE-2025-23042 (CVSS 9.1): Gradio Patches Critical ACL Bypass Flaw in Popular Machine Learning Platform

Do Son January 15, 2025 0

Patch your Gradio library now to fix a critical-severity vulnerability (CVE-2025-23042) that exposes sensitive files through an ACL bypass.

CVE-2024-9042: Code Execution Vulnerability Found in Kubernetes Windows Nodes CVE-2024-9042 ingress-nginx Vulnerability CVE-2026-4342
  • Vulnerability

CVE-2024-9042: Code Execution Vulnerability Found in Kubernetes Windows Nodes

Do Son January 15, 2025 0

Secure your Kubernetes clusters running Windows worker nodes from CVE-2024-9042. Learn how to upgrade Kubelet to the patched versions and protect your systems.

CVE-2024-7344: Howyar Reloader Vulnerability Exposes UEFI Systems to Unsigned Software Threats CVE-2024-7344
  • Vulnerability

CVE-2024-7344: Howyar Reloader Vulnerability Exposes UEFI Systems to Unsigned Software Threats

Do Son January 15, 2025 0

Discover the security flaw in Howyar Reloader UEFI bootloader, CVE-2024-7344, that allows attackers to bypass Secure Boot and execute unsigned software.

13,000 MikroTik Routers Hijacked for Global Malspam Operation CloudComputating - QSC framework
  • Vulnerability

13,000 MikroTik Routers Hijacked for Global Malspam Operation

Do Son January 15, 2025 0

Uncover the dangers of DNS misconfiguration and its role in a massive botnet operation. Learn how hackers exploit SPF records to distribute malware.

CVE-2025-20055 (CVSS 9.8): Critical Vulnerability Threatens STEALTHONE Storage CVE-2025-20055
  • Vulnerability

CVE-2025-20055 (CVSS 9.8): Critical Vulnerability Threatens STEALTHONE Storage

Do Son January 15, 2025 0

Take action now: JPCERT/CC warns of critical vulnerabilities in STEALTHONE D220, D340, and D440 network storage servers (CVE-2025-20055). Update firmware to stay secure.

CVE-2024-12365: Popular WordPress Caching Plugin Exposes Millions of Sites to Attack CVE-2024-12365
  • Vulnerability

CVE-2024-12365: Popular WordPress Caching Plugin Exposes Millions of Sites to Attack

Do Son January 15, 2025 0

Learn about the critical security flaw found in the W3 Total Cache plugin and how it puts over a million WordPress websites at risk (CVE-2024-12365).

Unveiling Zero-Day Behavior in PDF Samples: The Risk of NTLM Information Leaks NTLM Information Leaks
  • Vulnerability

Unveiling Zero-Day Behavior in PDF Samples: The Risk of NTLM Information Leaks

Do Son January 15, 2025 0

Learn about the newly discovered NTLM information leaks in PDF samples and the risks they pose in widely used applications like Adobe Reader and Foxit Reader.

Veeam Releases Patch for High-Risk SSRF Vulnerability CVE-2025-23082 in Azure Backup Solution CVE-2024-29212 - CVE-2025-23082 Veeam Backup & Replication CVE-2025-59470
  • Vulnerability

Veeam Releases Patch for High-Risk SSRF Vulnerability CVE-2025-23082 in Azure Backup Solution

Do Son January 15, 2025 0

Learn about a critical vulnerability in Veeam Backup for Microsoft Azure (CVE-2025-23082) and its potential impact on network security.

CVE-2023-37936 (CVSS 9.6): Urgent Patch Needed for FortiSwitch Vulnerability FortiSandbox Vulnerability Unauthenticated RCE FortiClient EMS Vulnerability CVE-2026-21643 FortiClient EMS Vulnerability CVE-2026-21643 CVE-2023-34992 - CVE-2023-37936 Fortinet Vulnerabilities CVE-2025-64155
  • Vulnerability

CVE-2023-37936 (CVSS 9.6): Urgent Patch Needed for FortiSwitch Vulnerability

Do Son January 15, 2025 0

Critical security vulnerability (CVE-2023-37936) affecting FortiSwitch product line. Learn about the impact, mitigation, and recommended patches.

Millions Stolen: North Korea Hackers Target Blockchain Industry Google Play, Crypto Wallets Cryptocurrency Thefts
  • Cyber Security

Millions Stolen: North Korea Hackers Target Blockchain Industry

Do Son January 14, 2025 0

Stay informed about the escalating threat of cryptocurrency thefts by North Korean cyber actors. Learn about their malicious activities and the impact on the global financial system.

CVE-2024-12084 (CVSS 9.8) – Code Execution Risk: Rsync Vulnerability Demands Immediate Patching CVE-2024-12084
  • Vulnerability

CVE-2024-12084 (CVSS 9.8) – Code Execution Risk: Rsync Vulnerability Demands Immediate Patching

Do Son January 14, 2025 0

Stay protected from CVE-2024-12084 and other vulnerabilities in Rsync. Learn about the risks, exploits, and how to secure your systems.

“PlugX” Malware Deleted from Thousands of Computers in Global Operation Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware
  • Malware
  • Vulnerability

“PlugX” Malware Deleted from Thousands of Computers in Global Operation

Do Son January 14, 2025 0

U.S. authorities successfully neutralize Chinese state-sponsored cyber espionage threat by deleting PlugX malware.

Ivanti Endpoint Manager Patches Critical Security Vulnerabilities CVE-2023-38036 - CVE-2024-10811
  • Vulnerability

Ivanti Endpoint Manager Patches Critical Security Vulnerabilities

Do Son January 14, 2025 0

Ivanti Endpoint Manager security advisory: Learn about the critical vulnerabilities, including CVE-2024-10811, posing a serious risk to enterprise systems.

CVE-2025-0147: Zoom Fixes High-Severity Security Flaw CVE-2025-0147
  • Vulnerability

CVE-2025-0147: Zoom Fixes High-Severity Security Flaw

Do Son January 14, 2025 0

Protect your sensitive information from disclosure and mitigate potential risks with the latest Zoom updates. Read about CVE-2025-0147 and other vulnerabilities.

Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch Kill Switch
  • Malware

Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch

Do Son January 14, 2025 0

Learn about the concerning supply chain attack targeting popular Node.js libraries, chokidar and chalk, and how developers can protect their projects.

Fortinet FortiGate Firewalls Targeted in Sophisticated Campaign Exploiting Management Interfaces Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion
  • Cyber Security
  • Vulnerability

Fortinet FortiGate Firewalls Targeted in Sophisticated Campaign Exploiting Management Interfaces

Do Son January 14, 2025 0

Discover the concerning campaign targeting Fortinet FortiGate firewalls. Learn how threat actors exploited vulnerabilities and established unauthorized access.

Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack WP3.XYZ Malware Attack
  • Malware

Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack

Do Son January 14, 2025 0

Protect your WordPress website from the WP3.XYZ malware attack. Learn how to detect and prevent unauthorized admin accounts, malicious plugins, and data exfiltration.

Chrome 132 Arrives: 16 Security Fixes in Latest Stable Release Chrome 132
  • Vulnerability

Chrome 132 Arrives: 16 Security Fixes in Latest Stable Release

Do Son January 14, 2025 0

Stay up to date with the latest release of Chrome 132.0.6834.83/84. Discover the security enhancements and critical updates for Windows, Mac, and Linux.

Microsoft’s January 2025 Patch Tuesday Fixes 159 Vulnerabilities, Including 10 Critical and 8 Zero-Days Driver Cleanup CVE-2024-49138 - December Patch Tuesday Windows update errors, Windows update troubleshooting
  • Vulnerability
  • Windows

Microsoft’s January 2025 Patch Tuesday Fixes 159 Vulnerabilities, Including 10 Critical and 8 Zero-Days

Do Son January 14, 2025 0

Stay secure with Microsoft's latest security update for 2025. Find out how the Patch Tuesday fixes 159 vulnerabilities, including eight zero-days.

SimpleHelp Urgents to Patch Critical Security Vulnerabilities Screenshot 2025-01-14 222456
  • Vulnerability

SimpleHelp Urgents to Patch Critical Security Vulnerabilities

Do Son January 14, 2025 0

Learn about critical vulnerabilities in SimpleHelp, a remote support software tool. Understand the risks posed to users and the potential for attackers to compromise servers and client machines.

Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution macOS malware 2024 XCSSET
  • Malware

Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution

Do Son January 14, 2025 0

Uncover the sophisticated phishing campaign leveraging Formbook stealer. Learn how this notorious malware continues to evolve and maintain its notoriety in the MaaS market.

Active Exploitation of CVE-2024-55591 (CVSS 9.6): FortiOS and FortiProxy Under Threat BeyondTrust Vulnerability CVE-2026-1731 UPBIT $369M Hack CVE-2024-55591 Ivanti VPN vulnerability, cyber espionage
  • Vulnerability

Active Exploitation of CVE-2024-55591 (CVSS 9.6): FortiOS and FortiProxy Under Threat

Do Son January 14, 2025 0

Discover the details of CVE-2024-55591, a critical vulnerability in Fortinet's FortiOS and FortiProxy. Learn how to protect your systems from this authentication bypass flaw.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-119446CVSS 9.4
    Session Fixation vulnerability in the CLI login flow in nerves-hub nerves_hub_web allows an unauthenticated attacker to obtain an...
    📅 Updated: Nov 10, 2026
  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.