Skip to content
July 25, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Windows Snipping Tool Can Leak Your Identity, PoC Available Snipping Tool Exploit CVE-2026-33829
  • Vulnerability

Windows Snipping Tool Can Leak Your Identity, PoC Available

Do Son April 20, 2026 0
Read More Read more about Windows Snipping Tool Can Leak Your Identity, PoC Available
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026) MCP Security Vulnerability Management
  • Weekly Recap

The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)

Do Son April 20, 2026 0
Read More Read more about The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)
More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide MiningDropper Android Malware Framework
  • Malware

More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide

Do Son April 20, 2026 0
Read More Read more about More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide
The Next.js Nightmare? Vercel Investigates “Critical” Internal Breach and Supply Chain Threat Vercel Supply Chain Next.js Security
  • Data Leak

The Next.js Nightmare? Vercel Investigates “Critical” Internal Breach and Supply Chain Threat

Do Son April 19, 2026 0
Read More Read more about The Next.js Nightmare? Vercel Investigates “Critical” Internal Breach and Supply Chain Threat
Dgraph’s Debug Endpoint Hands Over Admin Tokens to Anyone Dgraph Vulnerability CVSS 10.0 Dgraph Admin Leak CVE-2026-40173
  • Vulnerability Report

Dgraph’s Debug Endpoint Hands Over Admin Tokens to Anyone

Do Son April 19, 2026 0
Read More Read more about Dgraph’s Debug Endpoint Hands Over Admin Tokens to Anyone
North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto UNC1069 Fake Meetings ClickFix Malware
  • Cybercriminals

North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto

Do Son April 19, 2026 0
Read More Read more about North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
OAUTHBEARER Bypass and Sensitive Logging Leaks Hit Apache Kafka Kafka Authentication Bypass JWT Signature Validation Apache Kafka - CVE-2024-27309 & CVE-2024-31141
  • Vulnerability Report

OAUTHBEARER Bypass and Sensitive Logging Leaks Hit Apache Kafka

Do Son April 19, 2026 0
Read More Read more about OAUTHBEARER Bypass and Sensitive Logging Leaks Hit Apache Kafka
The Great Data Handover: Why the EU is Forcing Google to Share Its “Search Crown Jewels” Digital Markets Act Google search data Google Search, Preferred Sources
  • Technology

The Great Data Handover: Why the EU is Forcing Google to Share Its “Search Crown Jewels”

Do Son April 19, 2026 0
Read More Read more about The Great Data Handover: Why the EU is Forcing Google to Share Its “Search Crown Jewels”
Beyond the Chatbot: Anthropic Unveils “Claude Design” to Challenge Adobe and Canva Claude Design preview
  • Technology

Beyond the Chatbot: Anthropic Unveils “Claude Design” to Challenge Adobe and Canva

Do Son April 19, 2026 0
Read More Read more about Beyond the Chatbot: Anthropic Unveils “Claude Design” to Challenge Adobe and Canva
Chrome’s New Desktop Update Lets You Browse Side-by-Side with AI Chrome AI Mode side-by-side
  • Technology

Chrome’s New Desktop Update Lets You Browse Side-by-Side with AI

Do Son April 19, 2026 0
Read More Read more about Chrome’s New Desktop Update Lets You Browse Side-by-Side with AI
Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations AVEVA Pipeline Simulation Flaw CVE-2026-5387
  • Vulnerability Report

Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations

Do Son April 18, 2026 0
Read More Read more about Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations
Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine Thymeleaf SSTI Bypass CVE-2026-41901 Thymeleaf SSTI CVE-2026-40477
  • Vulnerability Report

Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine

Do Son April 17, 2026 0
Read More Read more about Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers Fortra BoKS vulnerability OS command injection, CVE-2026-9862 Altium Enterprise Server Vulnerability CVE-2026-9129 Path Traversal Patreon OAuth Vulnerability Identity Collision DRC INSIGHT Vulnerability Exam Data Hijacking Horner Automation PLC Industrial Brute Force Honeywell IQ4x Vulnerability CVE-2026-3611 DJI Romo vacuum security flaw Python Cryptography Vulnerability CVE-2026-26007 Open5GS Vulnerability CVE-2026-0622 Vivotek IP7137 Vulnerabilities CVE-2025-66049 Forcepoint DLP Vulnerability CVE-2025-14026 Cellopoint Secure Email Gateway - CVE-2024-9043
  • Vulnerability

Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers

Do Son April 17, 2026 0
Read More Read more about Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers
Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors Froxlor RCE Persistent Backdoor
  • Vulnerability Report

Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors

Do Son April 17, 2026 0
Read More Read more about Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors
Critical Command Injection Flaw Hits upKeeper Instant Privilege Access shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316
  • Vulnerability Report

Critical Command Injection Flaw Hits upKeeper Instant Privilege Access

Do Son April 17, 2026 0
Read More Read more about Critical Command Injection Flaw Hits upKeeper Instant Privilege Access
Opera’s “Browser Connector” Gives ChatGPT and Claude the Power to “See” Your Tabs Opera Browser Connector
  • Technology

Opera’s “Browser Connector” Gives ChatGPT and Claude the Power to “See” Your Tabs

Do Son April 17, 2026 0
Read More Read more about Opera’s “Browser Connector” Gives ChatGPT and Claude the Power to “See” Your Tabs
Gemini vs. GenAI Fraud: How Google Blocked 8.3 Billion Malicious Ads in 2025 Google Ads Safety Report 2025
  • Malware

Gemini vs. GenAI Fraud: How Google Blocked 8.3 Billion Malicious Ads in 2025

Do Son April 17, 2026 0
Read More Read more about Gemini vs. GenAI Fraud: How Google Blocked 8.3 Billion Malicious Ads in 2025
Triad Nexus’ $300M “Infrastructure Laundering” Machine Exposed Infrastructure Laundering Triad Nexus
  • Cybercriminals

Triad Nexus’ $300M “Infrastructure Laundering” Machine Exposed

Do Son April 17, 2026 0
Read More Read more about Triad Nexus’ $300M “Infrastructure Laundering” Machine Exposed
Critical Pre-Auth RCE Found in OpenAM Identity Platform OpenAM RCE CVE-2026-33439
  • Vulnerability Report

Critical Pre-Auth RCE Found in OpenAM Identity Platform

Do Son April 17, 2026 0
Read More Read more about Critical Pre-Auth RCE Found in OpenAM Identity Platform
AI-Generated RAT “PHANTOMPULSE” Targets Crypto Sector via Social Engineering PHANTOMPULSE RAT Obsidian Malware Abuse
  • Malware

AI-Generated RAT “PHANTOMPULSE” Targets Crypto Sector via Social Engineering

Do Son April 17, 2026 0
Read More Read more about AI-Generated RAT “PHANTOMPULSE” Targets Crypto Sector via Social Engineering
The “Laptop Farm” Fallout: Two NJ Men Sentenced for Facilitating $5M North Korean Work Scheme Laptop Farm North Korean IT Fraud
  • Cybercriminals

The “Laptop Farm” Fallout: Two NJ Men Sentenced for Facilitating $5M North Korean Work Scheme

Do Son April 17, 2026 0
Read More Read more about The “Laptop Farm” Fallout: Two NJ Men Sentenced for Facilitating $5M North Korean Work Scheme
Wormable Bugs: Microsoft April 2026 Patch Tuesday Fixes Two “Zero-Interaction” RCE Flaws Microsoft Patch Tuesday fixes disclosed zero day vulnerabilities Windows Wormable Exploit April 2026 Patch Tuesday Microsoft Patch Tuesday Zero-Day Vulnerabilities Microsoft, Patch Tuesday CVE-2025-55234 CVE-2024-43573 and CVE-2024-43572 Microsoft Patch Tuesday Security Vulnerabilities
  • Vulnerability Report

Wormable Bugs: Microsoft April 2026 Patch Tuesday Fixes Two “Zero-Interaction” RCE Flaws

Do Son April 17, 2026 0
Read More Read more about Wormable Bugs: Microsoft April 2026 Patch Tuesday Fixes Two “Zero-Interaction” RCE Flaws
❮ Prev Page
Next Page ❯

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-16723CVSS 9.0
    A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson\'s stock...
    Admin intel📅 Updated: Jul 25, 2026
  • CVE-2026-16232CVSS 9.1
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain...
    CISA KEV📅 Added to KEV: Jul 22, 2026
  • CVE-2026-50522CVSS 9.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
    Admin intelCISA KEV📅 Added to KEV: Jul 22, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-63030CVSS 9.8
    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-60137CVSS 5.9
    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-0770CVSS 9.8
    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2021-27137CVSS 8.1
    An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2026-6875CVSS 9.5
    ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
    Admin intel📅 Updated: Jul 18, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-61884CVSS 9.8
    The web management interface of Tycon Systems TPDIN-Monitor-WEB2  does not perform server-side validation...
  • CVE-2026-62379CVSS 9.8
    ## Summary A pre-authentication remote code execution vulnerability affects OpenAM. The remote...
  • CVE-2026-62263
    ### Summary The GHSA-6c99-87fr-6q7r fix wrapped WebAuthn authenticator deserialization in an `ObjectInputFilter`...
  • CVE-2026-62835CVSS 9.3
    Improper authorization in Azure Portal allows an unauthorized attacker to disclose information...
  • CVE-2026-48021CVSS 9.1
    In epa4all, prior to version 2026-05-20, an attacker who can intercept the...
  • CVE-2026-59940CVSS 9.8
    ## Summary A type confusion issue in `seroval.fromJSON()` allowed attacker-controlled JSON input...
  • CVE-2026-58630CVSS 10.0
    Improper access control in Azure App Service allows an unauthorized attacker to...
  • CVE-2026-57106CVSS 10.0
    Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to...
  • CVE-2026-56163CVSS 10.0
    Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an...
  • CVE-2026-15704CVSS 9.8
    In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.