Do Son Urgent: Uninstall the EOL Spring CLI VS Code extension now. CVE-2026-22718 (CVSS 6.6) allows command injection and will not be patched.
EOL
CISA KEV adds EOL D-Link and Array Networks flaws. ArrayOS AG (CVE-2025-66644) is actively exploited in Japan to drop PHP webshells. Retire EOL D-Link and patch ArrayOS AG immediately.
D-Link warned that DIR-878 has reached EOL with three unpatched RCE flaws. Unauthenticated remote attackers can execute arbitrary commands via Dynamic DNS and DMZ settings due to insecure CGI parameters.
ABB disclosed a Critical (CVSS 9.9) Missing Auth flaw (CVE-2025-9574) in EoL ALS-mini-S4/S8 load controllers, allowing unauthenticated remote config access. No patch will be released.
Apple has officially discontinued its Clips short-form video app, removing it from the App Store. Existing users can redownload it but are advised to back up unsaved projects.
CISA has added two TP-Link router flaws to its KEV Catalog, including an RCE vulnerability in end-of-life devices. Both are being actively exploited in the wild.
D-Link warns of a critical command injection flaw (CVSS 9.8) in its EOL DIR-series routers. A PoC is public, and since no patch is available, devices must be replaced.
CISA adds three D-Link vulnerabilities (CVE-2020-25078, -25079, -2022-40799) to its KEV Catalog, confirming active exploitation of EOL IP cameras.
NVIDIA will extend Game Ready driver support for Windows 10 until October 2026, a year beyond Microsoft's EOL, but only Windows 11 users will receive new feature and optimization updates after that date.
The EOL TP-Link Archer C50 router has a critical hardcoded DES key (CVE-2025-6982), allowing attackers to decrypt sensitive configuration files, including admin credentials and Wi-Fi passwords.
Ubuntu 24.10 "Oracular Oriole" reaches End of Life today, July 10, 2025. Upgrade to Ubuntu 25.04 or 24.04 LTS to ensure continued security and support!
A critical flaw (CVE-2025-7206, CVSS 9.8) in D-Link DIR-825 firmware 2.10 allows unauthenticated remote buffer overflow, crashing the web interface.
Google Chrome now collects hardware data to assess Windows 11 upgrade eligibility as Windows 10 nears EOL, informing Chrome's future support. ESU program offers one year of updates.
Six critical flaws in D-Link's EOL DIR-816 routers are exposed. No patches will be issued; replace device immediately to avoid remote code execution.
Microsoft strongly urges Windows 10 users to upgrade to Windows 11, citing superior security, performance, AI features, and a smoother UX, despite offering ESU.
Microsoft now offers one year of free Windows 10 ESU updates via Windows Backup or Microsoft Rewards points, extending security support until October 2026.
Two critical buffer overflow flaws in D-Link router allow remote code execution. PoC available, no patch will be issued.
A new flaw (CVE-2025-6031) in the discontinued Amazon Cloud Cam allows attackers to intercept network traffic, highlighting risks of unsupported smart home devices.
Linux Kernel 6.13 has reached its end-of-life after just three months. Users should upgrade to Kernel 6.14 or an LTS version for continued support.
Learn about Node.js EOL and the recent changes in vulnerability management for End-of-Life versions of Node.js.