Virtualizor

Virtualizor Hit By BGP Hijack Attack A graphic showing BGP routing hijacking redirecting a server update to a malicious source

Virtualizor Hit By BGP Hijack Attack

Do Son September 2, 2026

The server management panel Virtualizor recently suffered a devastating supply chain attack. Hackers maliciously manipulated Border Gateway...

Virtualizor Supply-Chain Attack: BGP Hijack Plants Backdoors

Virtualizor supply-chain attack via BGP hijack delivering a malicious update that plants a root backdoor on VPS hosts

Virtualizor Supply-Chain Attack: BGP Hijack Plants Backdoors

Do Son September 1, 2026

The veteran VPS server management panel Virtualizor has confirmed a serious supply-chain attack. Between 28 and 30...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-58138CVSS 9.8
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute...
Admin intel📅 Updated: Sep 20, 2026
CVE-2026-86124CVSS 9.8
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and...
Admin intel📅 Updated: Sep 19, 2026
CVE-2025-39682CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2025-39964CVSS 7.8
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2026-53266CVSS 8.8
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2026-76460CVSS 10.0
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-89026CVSS 9.8
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
Admin intel📅 Updated: Sep 16, 2026
CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026

CVE-2026-69586CVSS 9.8
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 21, 2026
CVE-2026-69590CVSS 9.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access...
📅 Updated: Sep 21, 2026
CVE-2026-69595CVSS 9.8
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code...
📅 Updated: Sep 21, 2026
CVE-2026-58491CVSS 9.3
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start...
📅 Updated: Sep 21, 2026
CVE-2026-93765CVSS 9.1
Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-document mapping code. Input whose...
📅 Updated: Sep 21, 2026
CVE-2026-85497CVSS 9.8
CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient...
📅 Updated: Sep 21, 2026
CVE-2026-93742CVSS 9.9
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of...
📅 Updated: Sep 21, 2026
CVE-2024-58385CVSS 9.8
Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter...
📅 Updated: Sep 21, 2026