Edge Devices

Four Attacker Clusters Exploit Citrix NetScaler Flaw CVE-2026-88771 to Plant Web Shells CVE-2026-88771 exploitation by four clusters deploying NetScaler web shells, Platypus agents, and reverse shells

CVE-2026-88771 exploitation by four clusters deploying NetScaler web shells, Platypus agents, and reverse shells

Four Attacker Clusters Exploit Citrix NetScaler Flaw CVE-2026-88771 to Plant Web Shells

Do Son October 7, 2026

At a Glance Malware family PHP web shells, a Perl web shell installer, Platypus agents, and a...

Attackers Exploit Citrix NetScaler Zero-Day CVE-2026-88772 to Plant Hidden Web Shells

Citrix NetScaler zero-day CVE-2026-88772 exploited to deploy WHIPSHOT web shell and SLAPSHOT tunneler

Attackers Exploit Citrix NetScaler Zero-Day CVE-2026-88772 to Plant Hidden Web Shells

Do Son October 1, 2026

Since at least early September 2026, attackers have taken root-level control of Citrix NetScaler appliances without a...

The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads DKnife Malware Router AitM Framework

DKnife Malware Router AitM Framework

The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads

Do Son February 9, 2026

A powerful new cyber weapon has been discovered lurking in routers and edge devices, capable of monitoring...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-110447CVSS 9.2
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2014-8739CVSS 9.8
Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-35234CVSS 8.1
The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2020-26876CVSS 7.5
The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course...
Watchtower Verified📅 Updated: Oct 15, 2026
CVE-2021-24175CVSS 9.8
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious...
Watchtower Verified📅 Updated: Oct 15, 2026

CVE-2026-76519CVSS 9.8
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated,...
CISA KEV📅 Added to KEV: Oct 14, 2026📅 Updated: Oct 14, 2026
CVE-2025-40320CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound...
📅 Updated: Oct 14, 2026
CVE-2025-63742CVSS 9.8
SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive...
📅 Updated: Oct 14, 2026
CVE-2026-108336CVSS 9.1
When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate...
📅 Updated: Oct 14, 2026
CVE-2026-108335CVSS 9.1
When the password reset functionality is enabled, and email is configured, an attacker could take over any account using...
📅 Updated: Oct 14, 2026
CVE-2025-67494CVSS 9.3
ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF...
📅 Updated: Oct 14, 2026
CVE-2025-67489CVSS 9.8
@vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote...
📅 Updated: Oct 14, 2026
CVE-2025-40343CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully...
📅 Updated: Oct 14, 2026