Skip to content
October 4, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
New Research Exposes VPN Vulnerability: Port Shadow Attacks Undermine User Privacy Port Shadow Vulnerability - VPN Security
  • Vulnerability

New Research Exposes VPN Vulnerability: Port Shadow Attacks Undermine User Privacy

Do Son July 17, 2024 0
Read More Read more about New Research Exposes VPN Vulnerability: Port Shadow Attacks Undermine User Privacy
CVE-2024-40725 & CVE-2024-40898: Apache HTTP Server Flaws Put Millions of Websites at Risk CVE-2024-40725 & CVE-2024-40898 Apache SSRF NTLM Leak, suexec Bypass
  • Vulnerability

CVE-2024-40725 & CVE-2024-40898: Apache HTTP Server Flaws Put Millions of Websites at Risk

Do Son July 17, 2024 0
Read More Read more about CVE-2024-40725 & CVE-2024-40898: Apache HTTP Server Flaws Put Millions of Websites at Risk
SAP AI Core’s Critical “SAPwned” Flaws Raise Supply Chain Attack Concerns SAPwned
  • Vulnerability

SAP AI Core’s Critical “SAPwned” Flaws Raise Supply Chain Attack Concerns

Do Son July 17, 2024 0
Read More Read more about SAP AI Core’s Critical “SAPwned” Flaws Raise Supply Chain Attack Concerns
New Android Malware “BadPack” Evades Security Analysis, Researchers Warn Android zero day flaw June 2026 security bulletin RuTaxi Trojan Android Banking Malware Pixel 9 zero-click exploit, Dolby UDC vulnerability CVE-2025-54957 NexusRoute Android RAT, India E-Challan Phishing ClayRat Self-Defense, Android Accessibility Abuse Android Trojan, AntiDot Android Malware "BadPack"
  • Malware

New Android Malware “BadPack” Evades Security Analysis, Researchers Warn

Do Son July 17, 2024 0
Read More Read more about New Android Malware “BadPack” Evades Security Analysis, Researchers Warn
Multiple Critical Vulnerabilities Discovered in FutureNet Networking Devices CVE-2024-31070 & CVE-2024-36491
  • Vulnerability

Multiple Critical Vulnerabilities Discovered in FutureNet Networking Devices

Do Son July 17, 2024 0
Read More Read more about Multiple Critical Vulnerabilities Discovered in FutureNet Networking Devices
TAG-100’s Global Espionage Campaign: Exploiting Open-Source Tools TAG-100
  • Cyber Security

TAG-100’s Global Espionage Campaign: Exploiting Open-Source Tools

Do Son July 17, 2024 0
Read More Read more about TAG-100’s Global Espionage Campaign: Exploiting Open-Source Tools
CVE-2024-20419 (CVSS 10): Critical Flaw in Cisco Smart Software Manager Opens Door to Account Takeover CVE-2024-20419 - Cisco Webex Vulnerability Cisco ISE DoS, CVE-2025-20152
  • Vulnerability

CVE-2024-20419 (CVSS 10): Critical Flaw in Cisco Smart Software Manager Opens Door to Account Takeover

Do Son July 17, 2024 0
Read More Read more about CVE-2024-20419 (CVSS 10): Critical Flaw in Cisco Smart Software Manager Opens Door to Account Takeover
NullBulge: The Cybercriminal Group Targeting AI and Gaming Communities with Ransomware NullBulge
  • Cyber Security

NullBulge: The Cybercriminal Group Targeting AI and Gaming Communities with Ransomware

Do Son July 17, 2024 0
Read More Read more about NullBulge: The Cybercriminal Group Targeting AI and Gaming Communities with Ransomware
Critical Security Flaw in Cisco Secure Email Gateway: CVE-2024-20401 Cisco IMC Vulnerability CVE-2026-20093 CVE-2024-20401 Cisco IOS XE Privilege Escalation
  • Vulnerability

Critical Security Flaw in Cisco Secure Email Gateway: CVE-2024-20401

Do Son July 17, 2024 0
Read More Read more about Critical Security Flaw in Cisco Secure Email Gateway: CVE-2024-20401
CISA Adds Three New Vulnerabilities to Known Exploited Vulnerabilities Catalog exploited vulnerabilities
  • Vulnerability

CISA Adds Three New Vulnerabilities to Known Exploited Vulnerabilities Catalog

Do Son July 17, 2024 0
Read More Read more about CISA Adds Three New Vulnerabilities to Known Exploited Vulnerabilities Catalog
SolarWinds Patches Multiple Critical Vulnerabilities in Access Rights Manager SolarWinds vulnerabilities
  • Vulnerability

SolarWinds Patches Multiple Critical Vulnerabilities in Access Rights Manager

Do Son July 17, 2024 0
Read More Read more about SolarWinds Patches Multiple Critical Vulnerabilities in Access Rights Manager
Ivanti Patches SQLi Vulnerability (CVE-2024-37381) in Endpoint Management Software CVE-2024-37381
  • Vulnerability

Ivanti Patches SQLi Vulnerability (CVE-2024-37381) in Endpoint Management Software

Do Son July 17, 2024 0
Read More Read more about Ivanti Patches SQLi Vulnerability (CVE-2024-37381) in Endpoint Management Software
GitLab Explores Sale, Sparks Bidding War Among Tech Giants GitLab Security Code Integrity GitLab sale GitLab, Security GitLab Stored XSS, Kubernetes Proxy Flaw
  • Technology

GitLab Explores Sale, Sparks Bidding War Among Tech Giants

Do Son July 17, 2024 0
Read More Read more about GitLab Explores Sale, Sparks Bidding War Among Tech Giants
CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability Airflow Credential Leak, UI Redaction Failure CVE-2024-39877 & CVE-2024-45784 Airflow Connection Leak, CVE-2025-54831
  • Vulnerability

CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability

Do Son July 16, 2024 0
Read More Read more about CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability
CVE-2024-6457 (CVSS 9.8): Critical Flaw in HUSKY Plugin Threatens 100K+ WooCommerce Stores CVE-2024-6457
  • Vulnerability

CVE-2024-6457 (CVSS 9.8): Critical Flaw in HUSKY Plugin Threatens 100K+ WooCommerce Stores

Do Son July 16, 2024 0
Read More Read more about CVE-2024-6457 (CVSS 9.8): Critical Flaw in HUSKY Plugin Threatens 100K+ WooCommerce Stores
Atlassian Fixes CVE-2024-21687 & CVE-2024-21686 Vulnerabilities in Bamboo and Confluence CVE-2024-21687 & CVE-2024-21686 Atlassian AI data contribution
  • Vulnerability

Atlassian Fixes CVE-2024-21687 & CVE-2024-21686 Vulnerabilities in Bamboo and Confluence

Do Son July 16, 2024 0
Read More Read more about Atlassian Fixes CVE-2024-21687 & CVE-2024-21686 Vulnerabilities in Bamboo and Confluence
Active Exploits Targeting Apache HugeGraph Flaw (CVE-2024-27348): PoC Code Released CVE-2024-27348 exploit
  • Vulnerability

Active Exploits Targeting Apache HugeGraph Flaw (CVE-2024-27348): PoC Code Released

Do Son July 16, 2024 0
Read More Read more about Active Exploits Targeting Apache HugeGraph Flaw (CVE-2024-27348): PoC Code Released
JPCERT/CC Warns: MirrorFace LODEINFO & NOOPDOOR Malware Targeting Industry MirrorFace malware
  • Cyber Security
  • Malware

JPCERT/CC Warns: MirrorFace LODEINFO & NOOPDOOR Malware Targeting Industry

Do Son July 16, 2024 0
Read More Read more about JPCERT/CC Warns: MirrorFace LODEINFO & NOOPDOOR Malware Targeting Industry
Critical Security Update Needed for baramundi Management Suite CVE-2024-6689
  • Vulnerability

Critical Security Update Needed for baramundi Management Suite

Do Son July 16, 2024 0
Read More Read more about Critical Security Update Needed for baramundi Management Suite
Malicious AWS Packages Deliver Malware Through JPEGs Malicious AWS Packages
  • Cyber Security
  • Malware

Malicious AWS Packages Deliver Malware Through JPEGs

Do Son July 16, 2024 0
Read More Read more about Malicious AWS Packages Deliver Malware Through JPEGs
CVE-2024-6695 (CVSS 9.8) in Popular WordPress Plugin Exposes 50,000 Sites to Admin Hijacking CVE-2024-6695
  • Vulnerability

CVE-2024-6695 (CVSS 9.8) in Popular WordPress Plugin Exposes 50,000 Sites to Admin Hijacking

Do Son July 15, 2024 0
Read More Read more about CVE-2024-6695 (CVSS 9.8) in Popular WordPress Plugin Exposes 50,000 Sites to Admin Hijacking
Security Flaw CVE-2024-6345 in Setuptools Exposes Python Projects to RCE CVE-2024-6345
  • Vulnerability

Security Flaw CVE-2024-6345 in Setuptools Exposes Python Projects to RCE

Do Son July 15, 2024 0
Read More Read more about Security Flaw CVE-2024-6345 in Setuptools Exposes Python Projects to RCE
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intel📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105218CVSS 9.1
    gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105216CVSS 9.1
    go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105086CVSS 9.3
    WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105089CVSS 9.3
    WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject...
    📅 Updated: Oct 4, 2026
  • CVE-2026-82042CVSS 9.3
    UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105215CVSS 9.3
    ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105211CVSS 9.2
    ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105209CVSS 9.3
    ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless...
    📅 Updated: Oct 4, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.