CVE-2026-53362

CISA Warns of Exploited Flaws in ownCloud, Linux Kernel, and JFrog Artifactory CISA KEV Catalog update showing CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384

CISA KEV Catalog update showing CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384

CISA Warns of Exploited Flaws in ownCloud, Linux Kernel, and JFrog Artifactory

Do Son August 28, 2026

TL;DR On August 27, 2026, CISA added three active threats to the KEV Catalog. These critical flaws...

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Fraggap Linux kernel vulnerability CVE-2026-53362 enabling local privilege escalation through a UDPv6 out-of-bounds write

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Do Son July 28, 2026

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named...

Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape Bad Epoll CVE-2026-46242 Linux kernel privilege escalation use-after-free public PoC exploit

Bad Epoll CVE-2026-46242 Linux kernel privilege escalation use-after-free public PoC exploit

Exploited in the Wild? Debian Webhost Rooted as Public PoCs Land for Bad Epoll (CVE-2026-46242) and IPv6 Frag Escape

Do Son July 14, 2026

TL;DR Two Linux kernel flaws now have public proof-of-concept exploit code and full technical write-ups. Bad Epoll...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-76460CVSS 10.0
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-89026CVSS 9.8
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
Admin intel📅 Updated: Sep 16, 2026
CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87886
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87827CVSS 10.0
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-78006CVSS 9.8
The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to,...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-39364
Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-27540CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture...
Admin intel📅 Updated: Sep 15, 2026

CVE-2026-69843CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-62874CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-69399CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-54734CVSS 10.0
Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied...
📅 Updated: Sep 17, 2026
CVE-2026-54767CVSS 9.1
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php exposes an unauthenticated GET endpoint whose...
📅 Updated: Sep 17, 2026
CVE-2026-54670CVSS 9.1
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatcher in web/html/contribuicao/controller/control.php accepts...
📅 Updated: Sep 17, 2026
CVE-2026-75837CVSS 9.1
## Summary The core Flex group blueprint `system/blueprints/user/group.yaml` (access field, lines 48-55) omits the `security@: admin.super` field guard...
📅 Updated: Sep 17, 2026
CVE-2026-54626CVSS 9.8
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles....
📅 Updated: Sep 17, 2026