Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
DEF CON Attendee Suspected in Fake WiFi Attack Targeting Delta Flight 591 Passengers DEF CON hacker fake WiFi hotspot attack Delta flight 591 phishing Google credentials deauthentication
  • Cybercriminals

DEF CON Attendee Suspected in Fake WiFi Attack Targeting Delta Flight 591 Passengers

Do Son August 15, 2026 0

Delta Air Lines is investigating a rogue WiFi hotspot on Flight 591 carrying DEF CON attendees, used to phish Google credentials via deauth attacks.

ChatGPT for Linux Desktop Preview Launches for Ubuntu, Debian, and Fedora ChatGPT Linux desktop app preview for Ubuntu Debian Fedora with Codex and Work features
  • Technology

ChatGPT for Linux Desktop Preview Launches for Ubuntu, Debian, and Fedora

Do Son August 15, 2026 0

OpenAI launches ChatGPT for Linux desktop in preview, supporting Ubuntu, Debian, and Fedora with ChatGPT, Codex, and Work features.

SpaceXAI Launches Grok 4.6 AI Model SpaceXAI Grok 4.6 AI Model handling complex tasks and software engineering
  • Technology

SpaceXAI Launches Grok 4.6 AI Model

Do Son August 15, 2026 0

Discover the new Grok 4.6 AI model by SpaceXAI. It excels in long-horizon tasks, software engineering, and interactive visual projects for developers.

Firefox uBlock Origin Support: The MV3 Solution Firefox uBlock Origin support against MV3 restrictions
  • Technology

Firefox uBlock Origin Support: The MV3 Solution

Do Son August 15, 2026 0

Discover how Firefox uBlock Origin support continues despite the MV3 transition. Learn why Edge and Chrome users face ad blocker restrictions soon.

Google Search Tests Exclusive AI Mode for Select Users Google Search AI mode interface, Google AI testing features
  • Technology

Google Search Tests Exclusive AI Mode for Select Users

Do Son August 15, 2026 0

Google recently began testing a new exclusive AI mode for search. Discover how this ChatGPT-style layout impacts conventional search results and user habits.

VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI photo_2026-08-14_162201_1786717337e6KSQ4lqBp
  • Press Release

VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI

cybernewswire August 14, 2026 0
Selidan, USA, August 14th, 2026, CyberNewswire New report examines suspicious Reddit activity, coordinated YouTube content and BBB...
Read More Read more about VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI
CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext Phoenix Contact PLCnext vulnerability letting an attacker execute unauthorized SQL queries via the controller web interface
  • Vulnerability Report

CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext

Do Son August 14, 2026 0

Phoenix Contact patched three PLCnext flaws, including CVE-2025-41771, which lets an attacker execute unauthorized SQL queries, plus a CVSS 9.8 RCE bug.

Gunra Ransomware Hits Critical Infrastructure, CISA Warns GoSerpent backdoor cyber espionage attack chain against Southeast Asian government networks
  • Malware

Gunra Ransomware Hits Critical Infrastructure, CISA Warns

Do Son August 14, 2026 0

CISA and five agencies warn that Gunra ransomware is hitting critical infrastructure with double extortion. A Linux flaw may let victims recover free.

CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts Mira Hormone Monitor vulnerability CVE-2026-68067 letting attackers control user accounts via a cloud login bypass
  • Vulnerability Report

CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts

Do Son August 14, 2026 0

CVE-2026-68067 (CVSS 9.8) lets attackers control user accounts on the Mira Hormone Monitor by bypassing the cloud login. Eight flaws total.

TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices TP-Link router vulnerabilities in ISP-managed mesh and modem devices with authentication bypass and command injection flaws
  • Vulnerability Report

TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices

Do Son August 14, 2026 0

TP-Link patched 5 TP-Link router vulnerabilities in ISP-managed mesh, router, and modem lines, including auth bypass and command injection.

CVE-2026-64582: PoC Exploit Published for Kernel LPE Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code
  • Vulnerability Report

CVE-2026-64582: PoC Exploit Published for Kernel LPE

Do Son August 14, 2026 0

A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8 EdgeConnect Orchestrator authentication bypass flaws CVE-2026-63455 and CVE-2026-63456 rated CVSS 9.8
  • Vulnerability Report

CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8

Do Son August 13, 2026 0

CVE-2026-63455 and CVE-2026-63456 let attackers bypass web authentication on HPE EdgeConnect Orchestrator. CVSS 9.8. Patch now.

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed Apple mediaremoted root privileges flaw CVE-2026-43723 with public proof-of-concept exploit code
  • Vulnerability Report

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026 0

PoC exploit code is public for CVE-2026-43723, an Apple mediaremoted flaw that lets an app gain root privileges. CVSS 7.8. Patch now.

Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public Xiaomi ShareMe MiDrop zero-click vulnerability silent file drop over BLE with public proof-of-concept exploit code
  • Vulnerability Report

Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public

Do Son August 13, 2026 0

A zero-click flaw in Xiaomi ShareMe (MiDrop) lets nearby attackers write files silently. Full details and PoC code are now public.

CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.
  • Vulnerability Report

CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution

Do Son August 13, 2026 0

WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.

ChainDrop npm Worm Hits 400+ Packages via Blockchain C2 ChainDrop npm worm supply chain malware stealing cloud credentials via Ethereum blockchain C2
  • Malware

ChainDrop npm Worm Hits 400+ Packages via Blockchain C2

Do Son August 13, 2026 0

ChainDrop npm worm infected 400+ packages, stealing cloud keys and CI secrets via blockchain C2. Unit 42 details the full attack chain and fixes.

Fake Zoom Installer Drops Overlord RAT on macOS Fake Zoom installer delivering Overlord RAT on macOS via a .NET downloader
  • Malware

Fake Zoom Installer Drops Overlord RAT on macOS

Do Son August 13, 2026 0

A fake Zoom installer delivers Overlord RAT on macOS via a .NET downloader. Jamf Threat Labs details the infection chain and defenses.

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed MariaDB remote code execution low-privilege RCE exploit chain with public proof-of-concept code
  • Vulnerability Report

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026 0

PoC exploit code is public for a MariaDB remote code execution chain. A low-privilege account can run commands as mariadbd. Details inside.

GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs GitLab patch release fixing 13 security flaws including high-severity XSS and CVE-2026-15217 on a dashboard
  • Vulnerability Report

GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs

Do Son August 12, 2026 0

The new GitLab patch release fixes 13 flaws, including high-severity XSS and authorization bugs. Update to 19.2.2, 19.1.4, or 19.0.6 now.

CVE-2026-67261: Dell VSI RCE Flaw Scores CVSS 9.8 Dell Virtual Storage Integrator unauthenticated remote code execution CVE-2026-67261 CVSS 9.8 critical vulnerability
  • Vulnerability Report

CVE-2026-67261: Dell VSI RCE Flaw Scores CVSS 9.8

Do Son August 12, 2026 0

Dell VSI for VMware vSphere Client has a critical unauthenticated RCE flaw (CVE-2026-67261) rated CVSS 9.8. Patch now.

CVE-2026-71319: Nuxt DevTools Flaw With 7.3 Million Monthly Downloads Allows Arbitrary Command Execution, CVSS 9.6 Nuxt DevTools vulnerability CVE-2026-71319 enabling arbitrary command execution, rated CVSS 9.6
  • Vulnerability Report

CVE-2026-71319: Nuxt DevTools Flaw With 7.3 Million Monthly Downloads Allows Arbitrary Command Execution, CVSS 9.6

Do Son August 12, 2026 0

CVE-2026-71319 lets attackers run arbitrary commands via unauthenticated Nuxt DevTools RPC. CVSS 9.6, 7.3M monthly downloads. Patch now.

CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed Puwell IP Camera vulnerabilities CVE-2026-61514 and CVE-2026-61515 with public proof-of-concept exploit code
  • Vulnerability Report

CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed

Do Son August 12, 2026 0

PoC exploit code is public for CVE-2026-61515, an unauthenticated command injection in Puwell IP Camera firmware. CVSS 9.3. Details inside.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59360CVSS 9.8
    The killProcesses mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59361CVSS 9.8
    The cleanIptables mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
  • CVE-2026-119923CVSS 9.3
    A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15,...
    📅 Updated: Nov 7, 2026
  • CVE-2026-124060CVSS 9.4
    A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...
    📅 Updated: Nov 7, 2026
  • CVE-2026-122041CVSS 9.1
    The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121379CVSS 9.6
    The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile...
    📅 Updated: Nov 7, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.