Critical Alert 1 Active Exploit Detected Today

CVE-2026-48558 — SimpleHelp Authentication Bypass Vulnerability →

Powered by CVE Watchtower

×

Device Takeover

Naxclow IoT Vulnerabilities: 7 Flaws Let Attackers Hijack Doorbells and Cameras Naxclow IoT vulnerabilities device takeover, CVE-2026-28742, CVE-2026-50101, CVE-2026-42947 CVE-2022-35914 Synectix LAN 232 TRIO CVE-2026-1633

Naxclow IoT vulnerabilities device takeover, CVE-2026-28742, CVE-2026-50101, CVE-2026-42947 CVE-2022-35914 Synectix LAN 232 TRIO CVE-2026-1633

Naxclow IoT Vulnerabilities: 7 Flaws Let Attackers Hijack Doorbells and Cameras

Do Son June 16, 2026

CISA has disclosed seven serious Naxclow IoT vulnerabilities affecting popular smart doorbells and cameras. Together, these flaws...

Streaming Fraud: “Massiv” Android Trojan Uses Fake IPTV Apps for Complete Device Takeover Massiv Android Malware IPTV Banking Trojan

Massiv Android Malware IPTV Banking Trojan

Streaming Fraud: “Massiv” Android Trojan Uses Fake IPTV Apps for Complete Device Takeover

Do Son February 23, 2026

The mobile threat landscape is becoming increasingly perilous as cybercriminals devise new, unsuspicious ways to infiltrate smartphones....

Sturnus Trojan Bypasses WhatsApp/Signal Encryption & Takes Over Android Devices Sturnus, Android Banking Trojan

Sturnus, Android Banking Trojan

Sturnus Trojan Bypasses WhatsApp/Signal Encryption & Takes Over Android Devices

Do Son November 21, 2025

MTI Security researchers have identified a sophisticated new threat in the mobile landscape: Sturnus, a privately operated...

Next-Gen Android Trojan Herodotus Mimics Human Typing to Bypass Behavioral Biometrics Anti-Fraud Systems Herodotus Human Typing, Behavioral Biometrics Bypass

Herodotus Human Typing, Behavioral Biometrics Bypass

Next-Gen Android Trojan Herodotus Mimics Human Typing to Bypass Behavioral Biometrics Anti-Fraud Systems

Do Son October 29, 2025

Cybersecurity researchers at ThreatFabric have discovered a new Android banking Trojan dubbed Herodotus, a malware strain that...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-48558CVSS 10.0
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication...
Admin intelCISA KEV📅 Added to KEV: Jun 29, 2026📅 Updated: Jun 29, 2026
CVE-2026-46817CVSS 9.8
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected...
Admin intel📅 Updated: Jun 29, 2026
CVE-2026-28496CVSS 9.4
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template...
Admin intel📅 Updated: Jun 25, 2026
CVE-2026-12569
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The...
CISA KEV📅 Added to KEV: Jun 25, 2026
CVE-2025-67038CVSS 9.8
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write...
CISA KEV📅 Added to KEV: Jun 23, 2026
CVE-2026-34908CVSS 10.0
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi...
CISA KEV📅 Added to KEV: Jun 23, 2026
CVE-2026-34909CVSS 10.0
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS...
CISA KEV📅 Added to KEV: Jun 23, 2026
CVE-2026-34910CVSS 10.0
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi...
CISA KEV📅 Added to KEV: Jun 23, 2026