UCP

FreePBX Vulnerabilities Enable Unauthenticated RCE and Administrator Takeover FreePBX vulnerabilities enabling unauthenticated RCE and administrator takeover in UCP and missedcall

FreePBX vulnerabilities enabling unauthenticated RCE and administrator takeover in UCP and missedcall

FreePBX Vulnerabilities Enable Unauthenticated RCE and Administrator Takeover

Do Son July 22, 2026

TL;DR Two new FreePBX vulnerabilities each carry a CVSS score of 9.3. One gives unauthenticated remote code...

From Search to Sale: How Google’s “Agent Commerce” Turns Gemini into Your Personal Buyer Google Agent Commerce 2026

Google Agent Commerce 2026

From Search to Sale: How Google’s “Agent Commerce” Turns Gemini into Your Personal Buyer

Do Son February 12, 2026

Vidhya Srinivasan, Vice President and General Manager of Ads at Google, articulated in her 2026 annual missive...

The End of the Shopping Tab: Google Unveils “Agentic Commerce” and UCP Google Agentic Commerce UCP, Universal Commerce Protocol retail partners

Google Agentic Commerce UCP, Universal Commerce Protocol retail partners

The End of the Shopping Tab: Google Unveils “Agentic Commerce” and UCP

Do Son January 13, 2026

At the recent NRF 2026 Retail’s Big Show in New York, Google CEO Sundar Pichai unveiled the...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-16232CVSS 9.1
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain...
CISA KEV📅 Added to KEV: Jul 22, 2026
CVE-2026-50522CVSS 9.8
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Admin intelCISA KEV📅 Added to KEV: Jul 22, 2026📅 Updated: Jul 21, 2026
CVE-2026-63030CVSS 9.8
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
CVE-2026-60137CVSS 5.9
WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
CVE-2026-0770CVSS 9.8
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
CISA KEV📅 Added to KEV: Jul 21, 2026
CVE-2021-27137CVSS 8.1
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality...
CISA KEV📅 Added to KEV: Jul 21, 2026
CVE-2026-6875CVSS 9.5
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
Admin intel📅 Updated: Jul 18, 2026
CVE-2026-39808CVSS 9.8
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
CISA KEV📅 Added to KEV: Jul 16, 2026