Critical Alert 1 Active Exploit Detected Today

CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability →

Powered by CVE Watchtower

×

Azure Security

Cloud DNS Takeover Powers Thai Gambling Campaign hacking

hacking

Cloud DNS Takeover Powers Thai Gambling Campaign

Do Son June 23, 2026

At a Glance Actor: Suspected single Chinese operator Activity Type: Cloud DNS takeover, SEO poisoning Targets: 163...

State-Sponsored Actors Operationalize ROADtools Framework in Cloud Campaigns ROADtools cloud attack toolkit

ROADtools cloud attack toolkit

State-Sponsored Actors Operationalize ROADtools Framework in Cloud Campaigns

Do Son May 28, 2026

Security analysts have released a comprehensive analysis regarding specialized offensive tools in modern network breaches. Specifically, hackers...

Juju’s CVSS 10 Flaw Hands Over Master Cloud Credentials

Juju’s CVSS 10 Flaw Hands Over Master Cloud Credentials

Do Son April 14, 2026

Juju, the popular open-source application orchestration engine, is facing a critical security emergency. A newly discovered vulnerability,...

Commvault Updates Security Advisory After Nation-State Threat Actor Activity in Azure Commvault, nation-state threat

Commvault, nation-state threat

Commvault Updates Security Advisory After Nation-State Threat Actor Activity in Azure

Do Son April 30, 2025

Commvault has issued a crucial update to its March 7, 2025, security advisory following the detection of...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-48282CVSS 10.0
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted...
Admin intel📅 Updated: Jul 3, 2026
CVE-2024-14037CVSS 9.8
Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution...
Admin intel📅 Updated: Jul 3, 2026
CVE-2026-8451CVSS 8.8
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured...
Admin intel📅 Updated: Jul 2, 2026
CVE-2026-8037CVSS 9.6
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to...
Admin intel📅 Updated: Jul 1, 2026
CVE-2026-45659CVSS 8.8
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CISA KEV📅 Added to KEV: Jul 1, 2026
CVE-2026-48558CVSS 10.0
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication...
Admin intelCISA KEV📅 Added to KEV: Jun 29, 2026📅 Updated: Jun 29, 2026
CVE-2026-46817CVSS 9.8
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected...
Admin intel📅 Updated: Jun 29, 2026
CVE-2026-28496CVSS 9.4
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template...
Admin intel📅 Updated: Jun 25, 2026