Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
FIDO Alliance Unveils New Draft Specifications for Secure Credential Exchange Secure Credential Exchange - Credential Exchange Format
  • Technology

FIDO Alliance Unveils New Draft Specifications for Secure Credential Exchange

Do Son October 15, 2024 0

Learn about the FIDO Alliance's efforts to standardize the secure exchange of credentials. Explore the new Credential Exchange Protocol and Credential Exchange Format.

PoC Exploit Release for Windows Kernel-Mode Driver Elevation of Privilege Flaw (CVE-2024-35250) CVE-2024-35250 PoC exploit
  • Vulnerability

PoC Exploit Release for Windows Kernel-Mode Driver Elevation of Privilege Flaw (CVE-2024-35250)

Do Son October 14, 2024 0

Based on Angelboy's analysis, security researcher Varwara has released a PoC exploit code to demonstrate the CVE-2024-35250's impact

CVE-2024-9312: Ubuntu Authd Flaw Allows User ID Spoofing CVE-2024-9312
  • Vulnerability

CVE-2024-9312: Ubuntu Authd Flaw Allows User ID Spoofing

Do Son October 14, 2024 0

Learn about the vulnerability CVE-2024-9312 in Authd and the potential risks it poses to user IDs and unauthorized access on Ubuntu machines.

Earth Simnavaz Exploits Windows Kernel Flaw CVE-2024-30088 in Attacks on Critical Infrastructure Earth Simnavaz
  • Cyber Security
  • Vulnerability

Earth Simnavaz Exploits Windows Kernel Flaw CVE-2024-30088 in Attacks on Critical Infrastructure

Do Son October 14, 2024 0

Discover the rise of cyberattacks by Earth Simnavaz. Find out how this Iranian-linked group targets the energy sector in the Gulf region.

Critical Security Vulnerability in Jetpack Plugin Affects Millions of WordPress Websites Jetpack vulnerability
  • Vulnerability

Critical Security Vulnerability in Jetpack Plugin Affects Millions of WordPress Websites

Do Son October 14, 2024 0

Learn about the recent Jetpack vulnerability and the urgent need to update. Safeguard your website from potential security risks today.

Game Freak Confirms Hack, Employee Data and Pokémon Designs Leaked Game Freak data breach
  • Data Leak

Game Freak Confirms Hack, Employee Data and Pokémon Designs Leaked

Do Son October 14, 2024 0

Game Freak confirms server breach, resulting in leaks of confidential information and internal materials related to the Pokémon franchise.

Splunk Patches Critical Vulnerabilities, Including Remote Code Execution Flaws Splunk Enterprise - CVE-2024-45731 and CVE-2024-45733
  • Vulnerability

Splunk Patches Critical Vulnerabilities, Including Remote Code Execution Flaws

Do Son October 14, 2024 0

Stay up-to-date on the latest security updates for Splunk Enterprise and Splunk Cloud Platform. Learn about the vulnerabilities and their potential impact.

New Linux Variant of DPRK-Attributed FASTCash Malware Discovered FASTCash malware
  • Linux
  • Malware

New Linux Variant of DPRK-Attributed FASTCash Malware Discovered

Do Son October 14, 2024 0

Uncover the latest Linux variant of FASTCash malware, used by North Korean state-sponsored hacking groups to target financial institutions.

CVE-2024-9137 (CVSS 9.4) in Moxa’s Cellular Routers and Security Appliances: Immediate Patching Required Moxa Hard-Coded Credentials, Critical JWT Bypass CVE-2024-9137 and CVE-2024-9139 - CVE-2024-12297 CVE-2024-7695 CVE-2024-9404 CVE-2024-12297 CVE-2025-0415
  • Vulnerability

CVE-2024-9137 (CVSS 9.4) in Moxa’s Cellular Routers and Security Appliances: Immediate Patching Required

Do Son October 14, 2024 0

Don't overlook the critical flaws in Moxa's systems. Dive into the details of CVE-2024-9137 and CVE-2024-9139 and the potential risks they bring

“Water Makara” Employs Astaroth Malware in Targeted Attacks on Brazilian Organizations Water Makara - Astaroth Malware
  • Cyber Security
  • Malware

“Water Makara” Employs Astaroth Malware in Targeted Attacks on Brazilian Organizations

Do Son October 14, 2024 0

Discover the Water Makara spear-phishing campaign targeting companies in Brazil. Find out how to identify and protect against this dangerous threat.

CVE-2024-9921 (CVSS 9.8): Critical Flaw Found in Popular Business Collaboration Tool Team+ CVE-2024-9921 - Team+
  • Vulnerability

CVE-2024-9921 (CVSS 9.8): Critical Flaw Found in Popular Business Collaboration Tool Team+

Do Son October 14, 2024 0

Act now to safeguard your business from critical security vulnerabilities in Team+. Discover what you need to know about CVE-2024-9921.

Gmail Scam Alert: Hackers Spoof Google to Steal Credentials Gmail Scam
  • Cyber Security

Gmail Scam Alert: Hackers Spoof Google to Steal Credentials

Do Son October 14, 2024 0

Beware of the latest Gmail scam designed to deceive even the most discerning individuals. Learn how to safeguard your account and personal information from this AI-augmented phishing ploy.

Google Enables Linux Terminal on Android, Running Debian in a Virtual Machine Google Android Data Settlement Linux terminal Android
  • Android
  • Technology

Google Enables Linux Terminal on Android, Running Debian in a Virtual Machine

Do Son October 14, 2024 0

Explore the new Linux terminal option in Android. Discover how developers can now run Linux terminal services within the Android OS environment.

Popular Java Security Framework ‘pac4j’ Vulnerable to RCE (CVE-2023-25581) CVE-2023-25581 - pac4j
  • Vulnerability

Popular Java Security Framework ‘pac4j’ Vulnerable to RCE (CVE-2023-25581)

Do Son October 13, 2024 0

Critical vulnerability in pac4j Java security framework: CVE-2023-25581 allows attackers to execute arbitrary code on affected systems.

$50,000 Bounty: Researcher Reveals Critical Zendesk Email Spoofing Flaw (CVE-2024-49193) CVE-2024-49193
  • Vulnerability

$50,000 Bounty: Researcher Reveals Critical Zendesk Email Spoofing Flaw (CVE-2024-49193)

Do Son October 13, 2024 0

Discover the details of CVE-2024-49193, a critical vulnerability in Zendesk's email system. Learn how this flaw can lead to dangerous email spoofing and unauthorized access.

Bitcoin Core Vulnerability (CVE-2024-35202) Enables Remote Node Crashes Bitcoin Core Node Crash CVE-2024-52911 CVE-2024-35202 - Bitcoin Core
  • Vulnerability

Bitcoin Core Vulnerability (CVE-2024-35202) Enables Remote Node Crashes

Do Son October 13, 2024 0

Learn about the recent vulnerability in Bitcoin Core (CVE-2024-35202) that could allow attackers to remotely crash nodes.

GitHub Enterprise Server Patches Critical Security Flaw – CVE-2024-9487 (CVSS 9.5) CVE-2024-9487 - CVE-2025-23369 PoC
  • Vulnerability

GitHub Enterprise Server Patches Critical Security Flaw – CVE-2024-9487 (CVSS 9.5)

Do Son October 13, 2024 0

Stay informed about the latest GitHub security updates. Learn about the critical vulnerability, CVE-2024-9487, and how it could potentially bypass authentication.

Banking Trojan TrickMo Compromised 13,000 Devices, Now Steals Device Unlock Patterns and PINs TrickMo Banking Trojan
  • Malware

Banking Trojan TrickMo Compromised 13,000 Devices, Now Steals Device Unlock Patterns and PINs

Do Son October 13, 2024 0

Uncover the hidden dangers of the TrickMo banking trojan. Learn about its evasion techniques and how it can access sensitive device information.

Thousands of Fortinet Devices Remain Exposed to RCE CVE-2024-23113 Vulnerability CVE-2024-23113 vulnerability
  • Vulnerability

Thousands of Fortinet Devices Remain Exposed to RCE CVE-2024-23113 Vulnerability

Do Son October 13, 2024 0

Stay informed about the CVE-2024-23113 vulnerability in Fortinet devices. Explore the potential impact and learn how to protect your network from exploitation.

Apache Roller Patches CSRF Flaw CVE-2024-46911 in Latest Update Apache Roller - CVE-2024-46911
  • Vulnerability

Apache Roller Patches CSRF Flaw CVE-2024-46911 in Latest Update

Do Son October 13, 2024 0

Important security update for Apache Roller! Find out how to safeguard your multi-user blogging platform from the risks of a CSRF flaw CVE-2024-46911

Microsoft Issues Guidance to Combat Rising Kerberoasting Attacks Kerberoasting attacks
  • Technology
  • Windows

Microsoft Issues Guidance to Combat Rising Kerberoasting Attacks

Do Son October 13, 2024 0

Protect your organization from Kerberoasting attacks. Learn how to defend against this growing threat to Active Directory.

Plane Project Management Tool Patches Critical SSRF Flaw – CVE-2024-47830 (CVSS 9.3) project management tool - CVE-2024-47830
  • Vulnerability

Plane Project Management Tool Patches Critical SSRF Flaw – CVE-2024-47830 (CVSS 9.3)

Do Son October 13, 2024 0

Discover CVE-2024-47830 in Plane, a popular project management tool, and learn how it was patched. Protect your data and services from unauthorized access.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-126259CVSS 9.0
    Missing authentication for critical function in FortiOS
    📅 Updated: Nov 10, 2026
  • CVE-2026-126262CVSS 9.3
    Improper neutralization of special elements used in an SQL command in FortiManager
    📅 Updated: Nov 10, 2026
  • CVE-2026-126260CVSS 9.0
    Server side request forgery vulnerability in FortiAnalyzer, FortiManager with FortiAnalyzer features & FortiAnalyzer-BigData
    📅 Updated: Nov 10, 2026
  • CVE-2026-126170CVSS 9.8
    Unauthenticated RCE in multiple products
    📅 Updated: Nov 10, 2026
  • CVE-2026-126261CVSS 9.0
    Improper authorizatin vulnerability in FortiManager
    📅 Updated: Nov 10, 2026
  • CVE-2026-126187CVSS 9.5
    React is a JavaScript library for building user interfaces. From 19.0.0 until 19.0.9, 19.1.10, 19.2.9, and 19.3.1, the...
    📅 Updated: Nov 10, 2026
  • CVE-2026-126229CVSS 9.1
    Authorization Bypass in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud
    📅 Updated: Nov 10, 2026
  • CVE-2026-126253CVSS 9.3
    OSPF Authentication Bypass in multiple product
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.