Critical Alert 1 Active Exploit Detected Today

CVE-2026-73570 — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability →

Powered by CVE Watchtower

×

Router Vulnerability

D-Link DWR-M961 Router Hit by Command Injection and Buffer Overflow Flaws D-Link router command injection CVE-2026-71958 buffer overflow

D-Link router command injection CVE-2026-71958 buffer overflow

D-Link DWR-M961 Router Hit by Command Injection and Buffer Overflow Flaws

Do Son August 18, 2026

D-Link patched 15 flaws in its DWR-M961 router this month. Most are D-Link router command injection bugs,...

Master Keys and Open Backdoors: TP-Link Issues Urgent Patch for Archer NX-Series Routers

Archer MR600 command injection WireGuard client configuration Tapo smart device vulnerability unencrypted Bluetooth transmission TP-Link router vulnerability CVE-2026-5509 patch Archer AX53 Vulnerability TP-Link Router Security Tapo C520WS Vulnerability TP-Link Security Patch TP-Link Archer NX Router Vulnerability TP-Link Archer Vulnerability CVE-2025-15568 TP-Link Archer BE230 Vulnerability Command Injection TP-Link Omada Vulnerability CVE-2025-9520 TP-Link Archer MR600 Vulnerability CVE-2025-14756 CVE-2026-0629 TP-Link Omada RCE, CVE-2025-6542 TP-Link, Smart plug vulnerability TP-Link Archer C50, Hardcoded DES Key TP-Link NVR, Command Injection TP-Link Routers cybersecurity

Master Keys and Open Backdoors: TP-Link Issues Urgent Patch for Archer NX-Series Routers

Do Son March 24, 2026

In a major security alert, TP-Link has released a series of critical firmware updates to patch several...

Trojan Routers: Texas Sues TP-Link Over Alleged CCP Surveillance and Supply Chain Deception TP-Link Lawsuit CCP Surveillance

TP-Link Lawsuit CCP Surveillance

Trojan Routers: Texas Sues TP-Link Over Alleged CCP Surveillance and Supply Chain Deception

Do Son February 20, 2026

Texas Attorney General Ken Paxton has officially filed a lawsuit against TP-Link Systems Inc., accusing the global...

Router Takeover: High-Severity Command Injection Flaw Hits TP-Link Archer MR600

Archer MR600 command injection WireGuard client configuration Tapo smart device vulnerability unencrypted Bluetooth transmission TP-Link router vulnerability CVE-2026-5509 patch Archer AX53 Vulnerability TP-Link Router Security Tapo C520WS Vulnerability TP-Link Security Patch TP-Link Archer NX Router Vulnerability TP-Link Archer Vulnerability CVE-2025-15568 TP-Link Archer BE230 Vulnerability Command Injection TP-Link Omada Vulnerability CVE-2025-9520 TP-Link Archer MR600 Vulnerability CVE-2025-14756 CVE-2026-0629 TP-Link Omada RCE, CVE-2025-6542 TP-Link, Smart plug vulnerability TP-Link Archer C50, Hardcoded DES Key TP-Link NVR, Command Injection TP-Link Routers cybersecurity

Router Takeover: High-Severity Command Injection Flaw Hits TP-Link Archer MR600

Do Son January 28, 2026

TP-Link has issued a security advisory for its popular Archer MR600 4G+ LTE router, warning of a...

RondoDox Botnet Unleashed: New Malware Uses ‘Exploit Shotgun’ to Target 50+ Router and IoT Flaws AdaptixC2 Abuse, Russian Cybercrime RondoDox Botnet, Exploit Shotgun China Cyber Power, Red Hackers Nvidia cyberattack

AdaptixC2 Abuse, Russian Cybercrime RondoDox Botnet, Exploit Shotgun China Cyber Power, Red Hackers Nvidia cyberattack

RondoDox Botnet Unleashed: New Malware Uses ‘Exploit Shotgun’ to Target 50+ Router and IoT Flaws

Do Son October 10, 2025

Trend Micro has uncovered a rapidly expanding botnet campaign dubbed RondoDox, which is targeting a wide spectrum...

RCE Flaw CVE-2025-10547 in DrayTek Vigor Routers Allows Unauthenticated Root Access DrayTek Vigor RCE, CVE-2025-10547 Router security, TheMoon malware

DrayTek Vigor RCE, CVE-2025-10547 Router security, TheMoon malware

RCE Flaw CVE-2025-10547 in DrayTek Vigor Routers Allows Unauthenticated Root Access

Do Son October 6, 2025

A newly disclosed vulnerability in DrayTek’s Vigor routers, tracked as CVE-2025-10547, could allow remote attackers to execute...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-77806CVSS 9.8
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-19598CVSS 9.8
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-19478CVSS 9.4
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8,...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-77647CVSS 9.8
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-69836CVSS 10.0
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-73570CVSS 8.9
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is...
Admin intelCISA KEV📅 Added to KEV: Aug 21, 2026📅 Updated: Aug 20, 2026
CVE-2026-72529CVSS 9.8
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,...
CISA KEV📅 Added to KEV: Aug 20, 2026
CVE-2026-72530CVSS 9.0
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,...
CISA KEV📅 Added to KEV: Aug 20, 2026