Skip to content
November 2, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Rockwell Automation patches multiple ICS flaws Rockwell Automation vulnerabilities in FactoryTalk Historian and FLEX I/O EtherNet/IP adapters
  • Vulnerability Report

Rockwell Automation patches multiple ICS flaws

Do Son June 19, 2026 0

Rockwell Automation vulnerabilities affect FactoryTalk Historian and FLEX I/O adapters, including a critical unauthenticated password-change flaw.

Splunk CVE-2026-20253: CVSS 9.8 RCE Exploited in the Wild Splunk CVE-2026-20253 remote code execution vulnerability diagram
  • Vulnerability Report

Splunk CVE-2026-20253: CVSS 9.8 RCE Exploited in the Wild

Do Son June 18, 2026 0

CISA warns of Splunk CVE-2026-20253, a CVSS 9.8 Splunk Enterprise vulnerability exploited in the wild allowing pre-authenticated remote code execution.

Node.js Security Updates: Urgent Action Required Node.js security updates patch critical vulnerabilities
  • Vulnerability Report

Node.js Security Updates: Urgent Action Required

Do Son June 18, 2026 0

Protect your servers with the latest Node.js security updates. Patch critical vulnerabilities like CVE-2026-48933 to secure your infrastructure today.

Velvet Ant’s Operation Highland: A Decade Inside Critical Infrastructure Conti ransomware developer sentenced for extortion and wire fraud
  • Cybercriminals

Velvet Ant’s Operation Highland: A Decade Inside Critical Infrastructure

Do Son June 18, 2026 0

Velvet Ant ran Operation Highland for nearly a decade, backdooring PAM and OpenSSH to hide inside an isolated critical infrastructure network.

ChatGPT Scheduled Tasks Transform AI into an Active Agent ChatGPT Scheduled Tasks feature transforming AI into an active agent
  • Technology

ChatGPT Scheduled Tasks Transform AI into an Active Agent

Do Son June 18, 2026 0

OpenAI introduces ChatGPT Scheduled Tasks, transforming the AI into a proactive agent capable of automated monitoring and routine management.

Microsoft China AI Business Thrives on OpenAI Sales Microsoft China AI business growth via OpenAI and ByteDance partnership
  • Technology

Microsoft China AI Business Thrives on OpenAI Sales

Do Son June 18, 2026 0

Microsoft's China AI business is thriving, with ByteDance spending $1 billion annually on OpenAI models via Azure despite US export bans.

Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829) Moxa NPort vulnerability CVE-2026-10829 stack buffer overflow in serial device server
  • Vulnerability Report

Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829)

Do Son June 18, 2026 0

A Moxa NPort vulnerability (CVE-2026-10829) lets authenticated attackers gain root via RCE on serial device servers. Patch v1.5.1 now.

AsyncRAT AI Lures Target Users Hunting AI Skills cy
  • Malware

AsyncRAT AI Lures Target Users Hunting AI Skills

Do Son June 18, 2026 0

FortiGuard Labs uncovered AsyncRAT AI lures using fake AI guides and an AutoHotkey loader to inject a stealthy .NET RAT into memory.

Apple Intelligence Developer Tools Revealed at WWDC 2026 Apple Intelligence developer tools showcase at WWDC 2026
  • Technology

Apple Intelligence Developer Tools Revealed at WWDC 2026

Do Son June 18, 2026 0

Discover the new Apple Intelligence developer tools from WWDC 2026. Explore how Xcode 27, App Intents, and MLX frameworks empower next-gen AI applications.

WhatsApp Tests View Once Text Messages WhatsApp testing View Once text messages feature on smartphone screen
  • Technology

WhatsApp Tests View Once Text Messages

Do Son June 18, 2026 0

WhatsApp is testing View Once text messages to enhance privacy. Discover how this new feature blocks screenshots and protects your sensitive information.

OpenAI Joins Rust Foundation with $600K Donation OpenAI joins Rust Foundation to support open-source infrastructure
  • Technology

OpenAI Joins Rust Foundation with $600K Donation

Do Son June 18, 2026 0

OpenAI joins the Rust Foundation as a Platinum Member, donating $600,000 to bolster open-source infrastructure and support ecosystem maintainers.

Apple Price Increase Looms Amid AI Memory Crisis Apple price increase due to AI memory component shortages
  • Technology

Apple Price Increase Looms Amid AI Memory Crisis

Do Son June 18, 2026 0

An unavoidable Apple price increase is coming soon. Discover why the AI boom and soaring memory costs will make the iPhone 18 and new Macs more expensive.

Khmer Shadow Espionage Campaign Targets Cambodian Government Trojanized streaming site causing Packagist themes iOS spyware infections
  • Malware

Khmer Shadow Espionage Campaign Targets Cambodian Government

Do Son June 18, 2026 0

Acronis reveals Khmer Shadow, a new espionage campaign using NIGHTFORGE loader and DLL sideloading to target Cambodian government entities with Havoc Demon.

FortiBleed: 30,791 Fortinet Firewalls Compromised in Global Credential Heist FortiBleed campaign map of 30,791 compromised Fortinet firewalls and VPN credential leak
  • Cybercriminals

FortiBleed: 30,791 Fortinet Firewalls Compromised in Global Credential Heist

Do Son June 18, 2026 0

The FortiBleed campaign exposed working logins for 30,791 Fortinet firewalls across 194 countries. This Fortinet credential leak hits every sector.

AI Drives 2026 Vulnerability Forecast to 66K CVEs, But Risk Stays Flat 2026 vulnerability forecast chart showing AI vulnerability discovery driving CVE growth
  • Vulnerability Report

AI Drives 2026 Vulnerability Forecast to 66K CVEs, But Risk Stays Flat

Do Son June 18, 2026 0

FIRST's 2026 vulnerability forecast warns AI vulnerability discovery could push CVEs to 66K, yet just 6.5% are truly actionable. Here's why.

China Influence Operations Target US AI Debate, OpenAI Warns China influence operations using banned ChatGPT accounts in OpenAI's June 2026 threat report targeting the US AI policy debate
  • Cybercriminals

China Influence Operations Target US AI Debate, OpenAI Warns

Do Son June 18, 2026 0

OpenAI's June 2026 threat report exposes China influence operations that used banned ChatGPT accounts to target US AI and tariff debates.

i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads i18next prototype pollution flaw CVE-2026-48713 in i18next-fs-backend
  • Vulnerability Report

i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads

Do Son June 18, 2026 0

CVE-2026-48713 exposes i18next prototype pollution in i18next-fs-backend, a CVSS 9.1 flaw threatening 1M+ weekly downloads. Update to 2.6.6 now.

Zyxel Patches Stack-Based Buffer Overflow in GS1900 Switches (CVE-2026-7273) Zyxel GS1900 vulnerability stack-based buffer overflow CVE-2026-7273 switch
  • Vulnerability Report

Zyxel Patches Stack-Based Buffer Overflow in GS1900 Switches (CVE-2026-7273)

Do Son June 18, 2026 0

Zyxel patched CVE-2026-7273, a stack-based buffer overflow in GS1900 switches. The Zyxel GS1900 vulnerability lets LAN attackers run OS commands.

Splunk AI Toolkit Vulnerabilities: Critical RCE & Data Risks Splunk AI Toolkit vulnerabilities including OS Command Injection CVE-2026-20266
  • Vulnerability Report

Splunk AI Toolkit Vulnerabilities: Critical RCE & Data Risks

Do Son June 17, 2026 0

New Splunk AI Toolkit vulnerabilities, including severe OS command injection (CVE-2026-20266), expose systems to attacks. Patch your instances immediately.

Active Gravity SMTP Vulnerability Exploited in the Wild Gravity SMTP Vulnerability CVE-2026-4020 exploit statistics
  • Vulnerability Report

Active Gravity SMTP Vulnerability Exploited in the Wild

Do Son June 17, 2026 0

Attackers are actively exploiting a critical Gravity SMTP vulnerability (CVE-2026-4020) causing sensitive information exposure. Update your plugin now.

Cisco ISE Vulnerabilities: Critical RCE and Info Disclosure Flaws Cisco ISE vulnerabilities diagram showing CVE-2026-20181 remote code execution and CVE-2026-20190 information disclosure.
  • Vulnerability Report

Cisco ISE Vulnerabilities: Critical RCE and Info Disclosure Flaws

Do Son June 17, 2026 0

Critical Cisco ISE vulnerabilities expose networks to Remote Code Execution (CVE-2026-20181) and data theft (CVE-2026-20190). Patch affected systems now.

Critical Apache Shiro LDAP Injection Flaw Uncovered Apache Shiro LDAP Injection showing the DefaultLdapRealm vulnerability flow and CVE-2026-49268 exploit path.
  • Vulnerability Report

Critical Apache Shiro LDAP Injection Flaw Uncovered

Do Son June 17, 2026 0

A critical Apache Shiro LDAP Injection vulnerability in DefaultLdapRealm, CVE-2026-49268, allows authentication bypass. Update your framework immediately.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-83770CVSS 9.8
    Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 2, 2026
  • CVE-2026-83780CVSS 9.8
    Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 2, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    📅 Updated: Nov 2, 2026
  • CVE-2026-83782CVSS 9.8
    Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 2, 2026
  • CVE-2026-19677CVSS 9.3
    An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to...
    📅 Updated: Nov 2, 2026
  • CVE-2026-111594CVSS 9.2
    InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120213CVSS 9.1
    @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In...
    📅 Updated: Nov 2, 2026
  • CVE-2026-102435CVSS 9.8
    The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to...
    📅 Updated: Nov 2, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.