CVE-2026-39808

CISA Adds FortiSandbox and SharePoint Flaws to KEV Catalog After Confirming Active Exploitation CISA KEV catalog adds three actively exploited FortiSandbox and SharePoint vulnerabilities

CISA KEV catalog adds three actively exploited FortiSandbox and SharePoint vulnerabilities

CISA Adds FortiSandbox and SharePoint Flaws to KEV Catalog After Confirming Active Exploitation

Do Son July 17, 2026

TL;DR CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on July 16, 2026. Two affect...

SmartRAT ClickFix Campaign Identified Diagram illustrating Langflow OSS vulnerabilities and CVE-2026-10134 execution paths

Diagram illustrating Langflow OSS vulnerabilities and CVE-2026-10134 execution paths

SmartRAT ClickFix Campaign Identified

Do Son June 24, 2026

At a Glance Malware Family: SmartRAT (also tracked as Banana RAT) Threat Actor: Suspected Brazilian cybercriminal groups...

Root Access Unlocked: FortiSandbox CVE-2026-39808 Details and PoC Exploit Publicly Disclosed FortiSandbox RCE CVE-2026-39808 PoC

FortiSandbox RCE CVE-2026-39808 PoC

Root Access Unlocked: FortiSandbox CVE-2026-39808 Details and PoC Exploit Publicly Disclosed

Do Son April 20, 2026

A critical vulnerability in FortiSandbox has been disclosured. The flaw, tracked as CVE-2026-39808, carries a devastating CVSS...

Critical 9.1 Flaws Hit Fortinet FortiSandbox FortiSandbox Vulnerability Unauthenticated RCE FortiClient EMS Vulnerability CVE-2026-21643 FortiClient EMS Vulnerability CVE-2026-21643 CVE-2023-34992 - CVE-2023-37936 Fortinet Vulnerabilities CVE-2025-64155

FortiSandbox Vulnerability Unauthenticated RCE FortiClient EMS Vulnerability CVE-2026-21643 FortiClient EMS Vulnerability CVE-2026-21643 CVE-2023-34992 - CVE-2023-37936 Fortinet Vulnerabilities CVE-2025-64155

Critical 9.1 Flaws Hit Fortinet FortiSandbox

Do Son April 15, 2026

Fortinet has issued an urgent advisory regarding two critical vulnerabilities in its FortiSandbox platform—vulnerabilities that could allow...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-77806CVSS 9.8
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-19598CVSS 9.8
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-19478CVSS 9.4
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8,...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-77647CVSS 9.8
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-69836CVSS 10.0
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-73570CVSS 8.9
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is...
Admin intelCISA KEV📅 Added to KEV: Aug 21, 2026📅 Updated: Aug 20, 2026
CVE-2026-72529CVSS 9.8
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,...
CISA KEV📅 Added to KEV: Aug 20, 2026
CVE-2026-72530CVSS 9.0
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,...
CISA KEV📅 Added to KEV: Aug 20, 2026