Skip to content
October 6, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Financially Motivated Hackers UAC-0006 Resurface with New Attacks Targeting Ukraine SMOKELOADER malware
  • Cyber Security
  • Malware

Financially Motivated Hackers UAC-0006 Resurface with New Attacks Targeting Ukraine

Do Son May 22, 2024 0
Read More Read more about Financially Motivated Hackers UAC-0006 Resurface with New Attacks Targeting Ukraine
CVE-2024-4835: GitLab Fixes Account Takeover Vulnerability CVE-2024-4835 CVE-2025-0475 & CVE-2025-0555
  • Vulnerability

CVE-2024-4835: GitLab Fixes Account Takeover Vulnerability

Do Son May 22, 2024 0
Read More Read more about CVE-2024-4835: GitLab Fixes Account Takeover Vulnerability
WinRAR Update Patches Text Vulnerability (CVE-2024-33899, CVE-2024-36052) CVE-2024-33899 &
  • Vulnerability

WinRAR Update Patches Text Vulnerability (CVE-2024-33899, CVE-2024-36052)

Do Son May 22, 2024 0
Read More Read more about WinRAR Update Patches Text Vulnerability (CVE-2024-33899, CVE-2024-36052)
New Information Stealer “SamsStealer” Emerges, Threatening Windows Users SamsStealer
  • Malware

New Information Stealer “SamsStealer” Emerges, Threatening Windows Users

Do Son May 22, 2024 0
Read More Read more about New Information Stealer “SamsStealer” Emerges, Threatening Windows Users
CVE-2024-31989: Critical Argo CD Flaw Exposes Kubernetes Clusters to Takeover CVE-2024-31989 Argo CD, vulnerability CVE-2025-55190
  • Vulnerability

CVE-2024-31989: Critical Argo CD Flaw Exposes Kubernetes Clusters to Takeover

Do Son May 22, 2024 0
Read More Read more about CVE-2024-31989: Critical Argo CD Flaw Exposes Kubernetes Clusters to Takeover
CVE-2024-21683: Atlassian Patches RCE Flaw in Confluence Data Center and Server CVE-2024-21683
  • Vulnerability

CVE-2024-21683: Atlassian Patches RCE Flaw in Confluence Data Center and Server

Do Son May 21, 2024 0
Read More Read more about CVE-2024-21683: Atlassian Patches RCE Flaw in Confluence Data Center and Server
Broadcom Security Alert: VMware Vulnerabilities Expose Data, Enable Attacks CVE-2024-22273
  • Vulnerability

Broadcom Security Alert: VMware Vulnerabilities Expose Data, Enable Attacks

Do Son May 21, 2024 0
Read More Read more about Broadcom Security Alert: VMware Vulnerabilities Expose Data, Enable Attacks
Multiple Critical Vulnerabilities Discovered in Ivanti Endpoint Manager as seen in CVE-2024-29822 through CVE-2024-29827
  • Vulnerability

Multiple Critical Vulnerabilities Discovered in Ivanti Endpoint Manager

Do Son May 21, 2024 0
Read More Read more about Multiple Critical Vulnerabilities Discovered in Ivanti Endpoint Manager
Turla APT Suspected in “Tiny BackDoor” Campaign Leveraging MSBuild to Evade Detection Tiny BackDoor
  • Cyber Security
  • Malware

Turla APT Suspected in “Tiny BackDoor” Campaign Leveraging MSBuild to Evade Detection

Do Son May 21, 2024 0
Read More Read more about Turla APT Suspected in “Tiny BackDoor” Campaign Leveraging MSBuild to Evade Detection
CVE-2024-29849 (CVSS 9.8): Veeam’s Backup Nightmare, Full System Access Exposed CVE-2024-29849 - CVE-2025-23114
  • Vulnerability

CVE-2024-29849 (CVSS 9.8): Veeam’s Backup Nightmare, Full System Access Exposed

Do Son May 21, 2024 0
Read More Read more about CVE-2024-29849 (CVSS 9.8): Veeam’s Backup Nightmare, Full System Access Exposed
Cybercriminals Leverage Docusign Phishing Templates in Sophisticated Attacks Docusign Phishing Templates
  • Cyber Security

Cybercriminals Leverage Docusign Phishing Templates in Sophisticated Attacks

Do Son May 21, 2024 0
Read More Read more about Cybercriminals Leverage Docusign Phishing Templates in Sophisticated Attacks
Unauthenticated RCE Flaw in Fortinet FortiSIEM: Researchers Publishes PoC for CVE-2023-34992 CVE-2023-34992 PoC
  • Vulnerability

Unauthenticated RCE Flaw in Fortinet FortiSIEM: Researchers Publishes PoC for CVE-2023-34992

Do Son May 21, 2024 0
Read More Read more about Unauthenticated RCE Flaw in Fortinet FortiSIEM: Researchers Publishes PoC for CVE-2023-34992
Void Manticore: Iranian State-Sponsored Cyber Warfare Exposed Void Manticore & Scarred Manticore
  • Cyber Security

Void Manticore: Iranian State-Sponsored Cyber Warfare Exposed

Do Son May 21, 2024 0
Read More Read more about Void Manticore: Iranian State-Sponsored Cyber Warfare Exposed
Invisible Miners: Unveiling GHOSTENGINE’s Crypto Mining Operations GHOSTENGINE
  • Cyber Security
  • Malware

Invisible Miners: Unveiling GHOSTENGINE’s Crypto Mining Operations

Do Son May 21, 2024 0
Read More Read more about Invisible Miners: Unveiling GHOSTENGINE’s Crypto Mining Operations
Researchers Detail Code Execution Vulnerability in Popular PDF Viewer, PDF.js CVE-2024-4367 PoC
  • Vulnerability

Researchers Detail Code Execution Vulnerability in Popular PDF Viewer, PDF.js

Do Son May 21, 2024 0
Read More Read more about Researchers Detail Code Execution Vulnerability in Popular PDF Viewer, PDF.js
Comparing web browsers: What info to look for d
  • Technique

Comparing web browsers: What info to look for

Do Son May 21, 2024 0
Read More Read more about Comparing web browsers: What info to look for
CVE-2024-4985 (CVSS 10): Critical Authentication Bypass Flaw Found in GitHub Enterprise Server CVE-2024-4985 GitHub Enterprise Server vulnerabilities
  • Vulnerability

CVE-2024-4985 (CVSS 10): Critical Authentication Bypass Flaw Found in GitHub Enterprise Server

Do Son May 20, 2024 0
Read More Read more about CVE-2024-4985 (CVSS 10): Critical Authentication Bypass Flaw Found in GitHub Enterprise Server
Linguistic Lumberjack (CVE-2024-4323): Critical Vulnerability Shakes Cloud Logging Infrastructure Linguistic Lumberjack
  • Vulnerability

Linguistic Lumberjack (CVE-2024-4323): Critical Vulnerability Shakes Cloud Logging Infrastructure

Do Son May 20, 2024 0
Read More Read more about Linguistic Lumberjack (CVE-2024-4323): Critical Vulnerability Shakes Cloud Logging Infrastructure
CISA Warns of Actively Exploited Flaws in NextGen Healthcare Mirth Connect and Chromium CVE-2023-43208
  • Vulnerability

CISA Warns of Actively Exploited Flaws in NextGen Healthcare Mirth Connect and Chromium

Do Son May 20, 2024 0
Read More Read more about CISA Warns of Actively Exploited Flaws in NextGen Healthcare Mirth Connect and Chromium
Keylogger in Microsoft Exchange Server Breaches Government Agencies Worldwide Microsoft Exchange Server Keylogger
  • Cyber Security
  • Malware

Keylogger in Microsoft Exchange Server Breaches Government Agencies Worldwide

Do Son May 20, 2024 0
Read More Read more about Keylogger in Microsoft Exchange Server Breaches Government Agencies Worldwide
Unauthenticated Attackers Can Hijack 400K+ WordPress Sites via Fluent Forms Bug (CVE-2024-2771) CVE-2024-2771
  • Vulnerability

Unauthenticated Attackers Can Hijack 400K+ WordPress Sites via Fluent Forms Bug (CVE-2024-2771)

Do Son May 20, 2024 0
Read More Read more about Unauthenticated Attackers Can Hijack 400K+ WordPress Sites via Fluent Forms Bug (CVE-2024-2771)
New ‘Cuckoo’ Mac Malware Mimics Homebrew, Threatens User Data Cuckoo Mac malware
  • Malware

New ‘Cuckoo’ Mac Malware Mimics Homebrew, Threatens User Data

Do Son May 20, 2024 0
Read More Read more about New ‘Cuckoo’ Mac Malware Mimics Homebrew, Threatens User Data
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-104019CVSS 9.3
    OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x...
    📅 Updated: Oct 6, 2026
  • CVE-2026-105778CVSS 9.4
    A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of...
    📅 Updated: Oct 6, 2026
  • CVE-2026-105794CVSS 9.1
    MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust....
    📅 Updated: Oct 6, 2026
  • CVE-2026-105851CVSS 9.3
    Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and...
    📅 Updated: Oct 6, 2026
  • CVE-2026-87830CVSS 9.1
    In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that...
    📅 Updated: Oct 6, 2026
  • CVE-2026-89238CVSS 9.1
    WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, leading to incorrect confidentiality...
    📅 Updated: Oct 6, 2026
  • CVE-2026-94293CVSS 9.3
    An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all...
    📅 Updated: Oct 6, 2026
  • CVE-2026-88424CVSS 9.8
    FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter(). This vulnerability...
    📅 Updated: Oct 6, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.