Skip to content
July 21, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
CVE-2026-53481 & CVE-2026-53483: Dell PowerProtect Full Takeover (9.8) Image showing a hacker taking complete control of system using CVE-2026-53483 and Dell vulnerabilities
  • Vulnerability Report

CVE-2026-53481 & CVE-2026-53483: Dell PowerProtect Full Takeover (9.8)

Do Son July 14, 2026 0
Read More Read more about CVE-2026-53481 & CVE-2026-53483: Dell PowerProtect Full Takeover (9.8)
Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape Bad Epoll CVE-2026-46242 Linux kernel privilege escalation use-after-free public PoC exploit
  • Vulnerability Report

Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape

Do Son July 14, 2026 0
Read More Read more about Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape
CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland X.Org Server use-after-free vulnerability CVE-2026-56000 patched in xorg-server 21.1.24
  • Vulnerability Report

CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland

Do Son July 14, 2026 0
Read More Read more about CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland
CVE-2026-59948: PHP Composer Flaw Lets Packages Execute Code Outside the Project Context PHP Composer arbitrary file write vulnerability CVE-2026-59948 patched in version 2.10.2
  • Vulnerability Report

CVE-2026-59948: PHP Composer Flaw Lets Packages Execute Code Outside the Project Context

Do Son July 14, 2026 0
Read More Read more about CVE-2026-59948: PHP Composer Flaw Lets Packages Execute Code Outside the Project Context
Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242) Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation
  • Vulnerability Report

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)

Do Son July 14, 2026 0
Read More Read more about Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)
Anthropic API Billing Error Hits Developer for $16M Anthropic API billing error notification, Claude API incorrect charge screenshot
  • Technology

Anthropic API Billing Error Hits Developer for $16M

Do Son July 14, 2026 0
Read More Read more about Anthropic API Billing Error Hits Developer for $16M
VMware Avi Load Balancer Authentication Bypass (CVE-2026-47865, CVSS 9.8) Headlines Seven-Flaw Patch VMware Avi Load Balancer authentication bypass vulnerability CVE-2026-47865 CVSS 9.8 critical patch
  • Vulnerability Report

VMware Avi Load Balancer Authentication Bypass (CVE-2026-47865, CVSS 9.8) Headlines Seven-Flaw Patch

Do Son July 14, 2026 0
Read More Read more about VMware Avi Load Balancer Authentication Bypass (CVE-2026-47865, CVSS 9.8) Headlines Seven-Flaw Patch
Meta Louisiana Data Center: A $50 Billion AI Gamble Meta Louisiana data center facility, Project Hyperion AI infrastructure investment, 5GW computing capacity server farm
  • Technology

Meta Louisiana Data Center: A $50 Billion AI Gamble

Do Son July 14, 2026 0
Read More Read more about Meta Louisiana Data Center: A $50 Billion AI Gamble
Greenhat Announces Successful Delegation at Web Summit Vancouver 2026 WebSummit_178395613180DohtofDR
  • Press Release

Greenhat Announces Successful Delegation at Web Summit Vancouver 2026

cybernewswire July 14, 2026 0
Read More Read more about Greenhat Announces Successful Delegation at Web Summit Vancouver 2026
SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP SAP Security Patch Day July 2026 CVE-2026-44747 memory corruption vulnerability in NetWeaver AS ABAP
  • Vulnerability Report

SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP

Do Son July 14, 2026 0
Read More Read more about SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP
CrowdStrike Details New Prompt Injection Attacks on AI Diagram showing how prompt injection attacks and prompt injection techniques threaten AI security.
  • Vulnerability Report

CrowdStrike Details New Prompt Injection Attacks on AI

Do Son July 14, 2026 0
Read More Read more about CrowdStrike Details New Prompt Injection Attacks on AI
Mexican Banking Fraud: REF6045 Operation Exposed Diagram of the REF6045 operation executing Mexican banking fraud using SCMBANKER.
  • Cybercriminals

Mexican Banking Fraud: REF6045 Operation Exposed

Do Son July 14, 2026 0
Read More Read more about Mexican Banking Fraud: REF6045 Operation Exposed
WinFsp Patches Two Privilege Escalation Flaws: CVE-2026-3006 and CVE-2026-7162 (CVSS 7.8) WinFsp vulnerabilities CVE-2026-3006 and CVE-2026-7162 enabling local privilege escalation on Windows
  • Vulnerability Report

WinFsp Patches Two Privilege Escalation Flaws: CVE-2026-3006 and CVE-2026-7162 (CVSS 7.8)

Do Son July 14, 2026 0
Read More Read more about WinFsp Patches Two Privilege Escalation Flaws: CVE-2026-3006 and CVE-2026-7162 (CVSS 7.8)
Windows Search Box Improvements Roll Out in Windows 11 Windows search box improvements and refined Windows Search settings in Windows 11
  • Windows

Windows Search Box Improvements Roll Out in Windows 11

Do Son July 14, 2026 0
Read More Read more about Windows Search Box Improvements Roll Out in Windows 11
Telegram t.me Domain Blocked by .ME Registry Links Down Telegram t.me domain serverHold status blocking all contact links and shared content URLs
  • Technology

Telegram t.me Domain Blocked by .ME Registry Links Down

Do Son July 14, 2026 0
Read More Read more about Telegram t.me Domain Blocked by .ME Registry Links Down
Netwrix Password Secure Flaws Enable Authenticated Remote Code Execution (CVSS 9.9), Update to 26.6.100 Netwrix Password Secure vulnerabilities enabling authenticated remote code execution on the server
  • Vulnerability Report

Netwrix Password Secure Flaws Enable Authenticated Remote Code Execution (CVSS 9.9), Update to 26.6.100

Do Son July 14, 2026 0
Read More Read more about Netwrix Password Secure Flaws Enable Authenticated Remote Code Execution (CVSS 9.9), Update to 26.6.100
CVE-2026-6875: Critical ServiceNow Sandbox Escape Allows Unauthenticated Remote Code Execution ServiceNow sandbox escape CVE-2026-6875 remote code execution vulnerability in the AI Platform
  • Vulnerability Report

CVE-2026-6875: Critical ServiceNow Sandbox Escape Allows Unauthenticated Remote Code Execution

Do Son July 14, 2026 0
Read More Read more about CVE-2026-6875: Critical ServiceNow Sandbox Escape Allows Unauthenticated Remote Code Execution
Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library Better Auth SSRF vulnerability CVE-2026-53513 in the SSO plugin exposing OIDC provider registration
  • Vulnerability Report

Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library

Do Son July 14, 2026 0
Read More Read more about Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library
Vidar Stealer Campaign Uses Factory-v3 Loader Diagram showing how a Vidar stealer campaign uses the Factory-v3 loader to infect systems.
  • Malware

Vidar Stealer Campaign Uses Factory-v3 Loader

Do Son July 13, 2026 0
Read More Read more about Vidar Stealer Campaign Uses Factory-v3 Loader
UNK_MassTraction Exploits Roundcube Webmail to Hit University Physics Departments UNK_MassTraction Roundcube exploitation infection chain deploying the VShell backdoor at universities
  • Cybercriminals

UNK_MassTraction Exploits Roundcube Webmail to Hit University Physics Departments

Do Son July 13, 2026 0
Read More Read more about UNK_MassTraction Exploits Roundcube Webmail to Hit University Physics Departments
Torq and Criminal IP Partner to Deliver Decision-Ready Threat Intelligence for Autonomous SOC Operations 1200_700_1783643174kG3odfUo4d
  • Press Release

Torq and Criminal IP Partner to Deliver Decision-Ready Threat Intelligence for Autonomous SOC Operations

cybernewswire July 13, 2026 0
Read More Read more about Torq and Criminal IP Partner to Deliver Decision-Ready Threat Intelligence for Autonomous SOC Operations
UAT-7810 Expands Its LapDogs ORB Network With New Router Malware GemStuffer RubyGems Campaign RubyGems Data Exfiltration TanStack npm Compromise Supply Chain Attack DNS Hijacking APT28 (Fancy Bear) OpenVSX Supply Chain Attack Checkmarx Plugin Breach Stryker Cyberattack CISA Alert Trans-Regional Cyber Conflict Operation Epic Fury Cyber Operation MacroMaze APT28 Cyber Espionage Notepad++ Supply Chain Attack Lotus Blossom Group Defense Industrial Base Threats GTIG Report APT28 Operation Neusploit CVE-2026-21509 Bookworm Malware
  • Cybercriminals

UAT-7810 Expands Its LapDogs ORB Network With New Router Malware

Do Son July 13, 2026 0
Read More Read more about UAT-7810 Expands Its LapDogs ORB Network With New Router Malware
❮ Prev Page
Next Page ❯

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-50522CVSS 9.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
    Admin intel📅 Updated: Jul 21, 2026
  • CVE-2026-63030CVSS 9.8
    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-60137CVSS 5.9
    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-0770CVSS 9.8
    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2021-27137CVSS 8.1
    An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2026-6875CVSS 9.5
    ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
    Admin intel📅 Updated: Jul 18, 2026
  • CVE-2026-39808CVSS 9.8
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
    CISA KEV📅 Added to KEV: Jul 16, 2026
  • CVE-2026-25089CVSS 9.8
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
    CISA KEV📅 Added to KEV: Jul 16, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-64825CVSS 9.3
    Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows...
  • CVE-2026-28321CVSS 9.1
    SolarWinds Serv-U is affected by a broken access control vulnerability that could...
  • CVE-2026-28317CVSS 9.1
    SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability...
  • CVE-2026-28316CVSS 9.1
    SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability...
  • CVE-2026-28314CVSS 9.1
    SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that...
  • CVE-2026-28313CVSS 9.1
    SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability...
  • CVE-2026-28312CVSS 9.1
    SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate...
  • CVE-2026-28310CVSS 9.1
    SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a...
  • CVE-2026-28309CVSS 9.1
    SolarWinds Serv-U is affected by a broken access control vulnerability that allows...
  • CVE-2026-28308CVSS 9.1
    SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.