Critical Alert 1 Active Exploit Detected Today

CVE-2026-86950 — Apple Multiple Products Out-of-Bounds Write Vulnerability →

Powered by CVE Watchtower

×

OpenShift

CVE-2026-78234 (CVSS 9.9): Critical Hawtio Operator Vulnerability Exposes Service Impersonation

Hawtio Operator vulnerability CVE-2026-78234 exploitation mechanism

CVE-2026-78234 (CVSS 9.9): Critical Hawtio Operator Vulnerability Exposes Service Impersonation

Do Son September 9, 2026

Red Hat issued a warning regarding a critical Hawtio Operator vulnerability in Kubernetes and OpenShift environments. This...

Red Hat ACM Fixes Five Critical Flaws, Including CVE-2026-72526 RCE Bug (CVSS 9.9) RHACM remote code execution CVE-2026-72526 vulnerability diagram

RHACM remote code execution CVE-2026-72526 vulnerability diagram

Red Hat ACM Fixes Five Critical Flaws, Including CVE-2026-72526 RCE Bug (CVSS 9.9)

Do Son August 17, 2026

Red Hat patched five critical bugs in Advanced Cluster Management this week. Two of them allow RHACM...

Critical Flaws in Red Hat OpenShift: CVE-2024-45496 (CVSS 9.9) & CVE-2024-7387 (CVSS 9.1) CVE-2024-45496 & CVE-2024-7387 - OpenShift

CVE-2024-45496 & CVE-2024-7387 - OpenShift

Critical Flaws in Red Hat OpenShift: CVE-2024-45496 (CVSS 9.9) & CVE-2024-7387 (CVSS 9.1)

Do Son September 17, 2024

Red Hat OpenShift, the industry-leading hybrid cloud platform, known for its robust security features and trusted by...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intel📅 Updated: Sep 30, 2026
CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026

CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intel📅 Updated: Sep 30, 2026
CVE-2026-95329CVSS 9.6
Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote...
📅 Updated: Sep 30, 2026
CVE-2026-103395CVSS 9.3
LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pickle enabled that deserializes attacker-supplied arguments in...
📅 Updated: Sep 30, 2026
CVE-2026-76570CVSS 10.0
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The...
📅 Updated: Sep 30, 2026
CVE-2026-101110CVSS 9.3
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function...
📅 Updated: Sep 30, 2026
CVE-2026-100752CVSS 9.3
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds...
📅 Updated: Sep 30, 2026
CVE-2026-102508CVSS 9.2
Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PLC4J)...
📅 Updated: Sep 30, 2026
CVE-2026-101108CVSS 9.3
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the...
📅 Updated: Sep 30, 2026