Critical Alert 1 Active Exploit Detected Today

CVE-2008-4128 — Cisco IOS Cross-Site Request Forgery Vulnerability →

Powered by CVE Watchtower

×

Patch Alert

CISA Issues Three-Days Patch Mandate for Critical 9.8 F5 BIG-IP RCE State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities

State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities

CISA Issues Three-Days Patch Mandate for Critical 9.8 F5 BIG-IP RCE

Do Son March 29, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical Remote Code Execution (RCE) vulnerability...

Critical 9.4 CVSS RCE Flaws in n8n Turn Workflows into Backdoors n8n RCE Automation Security n8n Vulnerability Prototype Pollution RCE

n8n RCE Automation Security n8n Vulnerability Prototype Pollution RCE

Critical 9.4 CVSS RCE Flaws in n8n Turn Workflows into Backdoors

Do Son March 27, 2026

Security researchers have disclosed two critical vulnerabilities in n8n, the popular fair-code workflow automation platform used by...

Critical 9.3 CVSS Auth Bypass and XSS Flaws Hit MantisBT MantisBT Vulnerability Authentication Bypass

MantisBT Vulnerability Authentication Bypass

Critical 9.3 CVSS Auth Bypass and XSS Flaws Hit MantisBT

Do Son March 27, 2026

Security researchers have identified a trio of significant vulnerabilities within MantisBT, the popular open-source issue tracking system...

Critical 9.8 CVSS SpEL Injection and SSRF Flaws Hit Spring AI Framework Spring AI Vulnerability Remote Code Execution (RCE)

Spring AI Vulnerability Remote Code Execution (RCE)

Critical 9.8 CVSS SpEL Injection and SSRF Flaws Hit Spring AI Framework

Do Son March 26, 2026

Spring AI, the popular framework for integrating Artificial Intelligence into Java applications, is facing a series of...

BIND 9 Security Alert: ISC Releases Patches for Trio of Vulnerabilities CVE-2023-3341 BIND 9 Security DNS ACL Bypass

CVE-2023-3341 BIND 9 Security DNS ACL Bypass

BIND 9 Security Alert: ISC Releases Patches for Trio of Vulnerabilities

Do Son March 26, 2026

The Internet Systems Consortium (ISC) has issued an important security advisory for BIND 9, the world’s most...

High-Severity strongSwan Flaw Enables Remote VPN Gateway Crashes libstrongswan double-free exploit strongSwan CVE-2026-47895 CVE-2023-41913 strongSwan Vulnerability VPN Denial of Service

libstrongswan double-free exploit strongSwan CVE-2026-47895 CVE-2023-41913 strongSwan Vulnerability VPN Denial of Service

High-Severity strongSwan Flaw Enables Remote VPN Gateway Crashes

Do Son March 26, 2026

A high-severity security vulnerability has been uncovered in strongSwan, the widely used open-source IPsec-based VPN solution. The...

Zabbix API Vulnerability: High-Severity SQL Injection Threatens Network Monitoring Security Zabbix XSS Vulnerabilities CVE-2026-23926 zabbix - CVE-2024-22116 Zabbix SQL Injection CVE-2026-23921

Zabbix XSS Vulnerabilities CVE-2026-23926 zabbix - CVE-2024-22116 Zabbix SQL Injection CVE-2026-23921

Zabbix API Vulnerability: High-Severity SQL Injection Threatens Network Monitoring Security

Do Son March 26, 2026

A high-severity security vulnerability has been identified in the Zabbix API, a popular open-source monitoring solution used...

DHCP Down: High-Severity Stack Overflow Flaw Threatens to Paralyze Kea Networks critical BIND 9 flaws Kea DHCP Vulnerability CVE-2026-3608 CVE-2022-1183 CVE-2025-40779 Kea DHCP, vulnerability

critical BIND 9 flaws Kea DHCP Vulnerability CVE-2026-3608 CVE-2022-1183 CVE-2025-40779 Kea DHCP, vulnerability

DHCP Down: High-Severity Stack Overflow Flaw Threatens to Paralyze Kea Networks

Do Son March 26, 2026

The Internet Systems Consortium (ISC) has issued a high-severity security advisory regarding a critical vulnerability affecting the...

Critical RCE Flaw in PTC Windchill and FlexPLM Puts Product Data at Risk PTC Windchill RCE Insecure Deserialization

PTC Windchill RCE Insecure Deserialization

Critical RCE Flaw in PTC Windchill and FlexPLM Puts Product Data at Risk

Do Son March 26, 2026

PTC has issued a high-priority security advisory regarding a critical vulnerability affecting its Windchill and FlexPLM product...

Cisco Alert: Public Vulnerabilities in IOS XE Risk Service Denial and Privilege Escalation Cisco IMC Vulnerability CVE-2026-20093 CVE-2024-20401 Cisco IOS XE Privilege Escalation

Cisco IMC Vulnerability CVE-2026-20093 CVE-2024-20401 Cisco IOS XE Privilege Escalation

Cisco Alert: Public Vulnerabilities in IOS XE Risk Service Denial and Privilege Escalation

Do Son March 26, 2026

Cisco has issued important security advisories for two distinct vulnerabilities within its Cisco IOS XE Software, targeting...

NAS Under Siege: Critical 9.8 CVSS Bug in Synology Telnet Opens the Door to Total Hijack Synology Chat Server vulnerabilities Synology security update Synology DSM Update NAS Security Vulnerability Synology VPN Update SSL VPN Vulnerability Synology Telnet Flaw DSM Security Update Synology DSM Telnet vulnerability BeeStation Zero-Day, Pwn2Own RCE CVE-2024-11131 & CVE-2024-10442 CVE-2025-2848 Synology, NAS

Synology Chat Server vulnerabilities Synology security update Synology DSM Update NAS Security Vulnerability Synology VPN Update SSL VPN Vulnerability Synology Telnet Flaw DSM Security Update Synology DSM Telnet vulnerability BeeStation Zero-Day, Pwn2Own RCE CVE-2024-11131 & CVE-2024-10442 CVE-2025-2848 Synology, NAS

NAS Under Siege: Critical 9.8 CVSS Bug in Synology Telnet Opens the Door to Total Hijack

Do Son March 26, 2026

Synology has issued an urgent security update for its DiskStation Manager (DSM) operating system to address a...

Public Flaws in Cisco IOx Allow Unauthenticated Log Injection and Admin XSS Cisco IOx Log Manipulation Cisco Small Business - CVE-2024-20393 and CVE-2024-20470

Cisco IOx Log Manipulation Cisco Small Business - CVE-2024-20393 and CVE-2024-20470

Public Flaws in Cisco IOx Allow Unauthenticated Log Injection and Admin XSS

Do Son March 26, 2026

Cisco has issued security advisories regarding two vulnerabilities in its Cisco IOx application hosting environment for Cisco...

The Backup Backdoor: How a Simple File Edit Grants Full SYSTEM Control in IDrive for Windows IDrive Vulnerability Privilege Escalation

IDrive Vulnerability Privilege Escalation

The Backup Backdoor: How a Simple File Edit Grants Full SYSTEM Control in IDrive for Windows

Do Son March 26, 2026

A critical local privilege escalation vulnerability has been discovered in the IDrive Cloud Backup Client for Windows,...

F5 Out-of-Band Security Alert: Multiple Vulnerabilities Unveiled in NGINX Plus and Open Source NGINX heap buffer overflow vulnerability NGINX Vulnerability Buffer Overflow CVE-2024-24989, CVE-2024-24990 NGINX ACME

NGINX heap buffer overflow vulnerability NGINX Vulnerability Buffer Overflow CVE-2024-24989, CVE-2024-24990 NGINX ACME

F5 Out-of-Band Security Alert: Multiple Vulnerabilities Unveiled in NGINX Plus and Open Source

Do Son March 25, 2026

In a significant out-of-band security notification released on March 24, 2026, F5 has disclosed several critical and...

Squid Caching Proxy Alert: Critical ICP Protocol Flaws Threaten Web Infrastructure CVE-2024-25617 CVE-2025-59362 Squid Proxy ICP Vulnerability

CVE-2024-25617 CVE-2025-59362 Squid Proxy ICP Vulnerability

Squid Caching Proxy Alert: Critical ICP Protocol Flaws Threaten Web Infrastructure

Do Son March 25, 2026

Squid, the widely deployed open-source caching proxy, has been hit with a trio of significant security vulnerabilities...

GitLab Critical Alert: High-Severity Flaws Allow App Impersonation and AI Token Leaks GitLab Security Update Account Impersonation GitLab Security Update CVE-2026-1090 GitLab vulnerability GitLab vulnerability, GitLab patches

GitLab Security Update Account Impersonation GitLab Security Update CVE-2026-1090 GitLab vulnerability GitLab vulnerability, GitLab patches

GitLab Critical Alert: High-Severity Flaws Allow App Impersonation and AI Token Leaks

Do Son March 25, 2026

GitLab has released a critical security advisory alongside versions 18.10.1, 18.9.3, and 18.8.7 for its Community (CE)...

Code in the Wild: Full Technical Deep-Dive and Public GitHub PoC Released for Critical Linux TLS Root Exploit CIFSwitch local root exploit cifs-utils privilege escalation Linux Kernel Root Exploit CVE-2025-39946 PoC CVE-2023-2598 PoC Ubuntu LPE Vulnerability CVE-2026-3888

CIFSwitch local root exploit cifs-utils privilege escalation Linux Kernel Root Exploit CVE-2025-39946 PoC CVE-2023-2598 PoC Ubuntu LPE Vulnerability CVE-2026-3888

Code in the Wild: Full Technical Deep-Dive and Public GitHub PoC Released for Critical Linux TLS Root Exploit

Do Son March 25, 2026

Security researcher Ramdhan at StarLabs has published a deep-dive technical analysis of a critical vulnerability in the...

From Viewer to SYSTEM: Critical 10.0 CVSS Flaw in GeoVision ERM Allows Full Host Takeover GeoVision CVE-2026-4606 Local Privilege Escalation

GeoVision CVE-2026-4606 Local Privilege Escalation

From Viewer to SYSTEM: Critical 10.0 CVSS Flaw in GeoVision ERM Allows Full Host Takeover

Do Son March 25, 2026

In a major security alert for the surveillance industry, GeoVision has disclosed a critical vulnerability in its...

High-Severity JSON Schema Flaw Threatens MariaDB Database Stability MariaDB Vulnerability JSON Schema Overflow

MariaDB Vulnerability JSON Schema Overflow

High-Severity JSON Schema Flaw Threatens MariaDB Database Stability

Do Son March 24, 2026

MariaDB, the widely used open-source relational database and community-developed fork of MySQL, has released critical updates to...

Bridge or Backdoor? Critical 9.8 RCE Flaw Threatens Helmholz Industrial Networks Helmholz myREX24V2 Industrial RCE

Helmholz myREX24V2 Industrial RCE

Bridge or Backdoor? Critical 9.8 RCE Flaw Threatens Helmholz Industrial Networks

Do Son March 24, 2026

Industrial connectivity specialist Helmholz GmbH & Co. KG has issued an urgent security advisory regarding multiple vulnerabilities...

High-Severity Spring Cloud Config Flaw Triggers File Leaks and SSRF Spring Data vulnerabilities Spring Cloud Config CVE-2026-22739 Spring Gateway SpEL, STOMP WebSocket CSRF Spring Security, vulnerability CVE-2024-38819 CVE-2025-41243 Spring Cloud Gateway, vulnerability

Spring Data vulnerabilities Spring Cloud Config CVE-2026-22739 Spring Gateway SpEL, STOMP WebSocket CSRF Spring Security, vulnerability CVE-2024-38819 CVE-2025-41243 Spring Cloud Gateway, vulnerability

High-Severity Spring Cloud Config Flaw Triggers File Leaks and SSRF

Do Son March 24, 2026

A significant security flaw has been identified in Spring Cloud Config, a popular framework used to provide...

8 High-Severity Risks Fixed: Chrome Desktop Update Fixes Critical Memory and Buffer Flaws Chrome Security Update High-Severity Flaws

Chrome Security Update High-Severity Flaws

8 High-Severity Risks Fixed: Chrome Desktop Update Fixes Critical Memory and Buffer Flaws

Do Son March 24, 2026

In a significant move to bolster user safety, a new Chrome Stable Channel Update has been launched...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-53362
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation...
Admin intel📅 Updated: Jul 14, 2026
CVE-2026-46242CVSS 7.8
In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file...
Admin intel📅 Updated: Jul 14, 2026
CVE-2008-4128CVSS 4.3
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871...
CISA KEV📅 Added to KEV: Jul 13, 2026
CVE-2026-1207CVSS 5.4
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on...
Admin intel📅 Updated: Jul 10, 2026
CVE-2026-48939CVSS 10.0
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment...
CISA KEV📅 Added to KEV: Jul 10, 2026
CVE-2026-56291CVSS 10.0
The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files...
CISA KEV📅 Added to KEV: Jul 10, 2026
CVE-2026-55255CVSS 8.4
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct...
CISA KEV📅 Added to KEV: Jul 7, 2026
CVE-2026-48908
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in...
CISA KEV📅 Added to KEV: Jul 7, 2026