Vulnerabilities
Stay informed with the latest Vulnerabilities news on The Cyber Express, a trusted source for cybersecurity and information technology updates. Our publication covers the most recent developments, trends, and expert insights into security vulnerabilities affecting various industries. Whether you're a cybersecurity professional or simply interested in staying ahead of emerging threats, we provide comprehensive coverage of Vulnerabilities news. Explore detailed reports, expert opinions, and the most critical updates on Vulnerabilities news to safeguard your business and personal information from potential risks in today’s digital landscape. Stay updated with The Cyber Express.
AshSqlite Vulnerability (CVE-2026-77846) Exposes Hidden JSON Fields
CVE-2026-77846 is an AshSqlite vulnerability that can expose hidden JSON fields through unsafe JSON path handling when untrusted input is...
Read moreDetails
Ledger Fixes Ethereum App Flaw as Disclosure Timeline Is Disputed
Ledger says its Ethereum app flaw was fixed before TestMachine's disclosure, but missing release details leave the patch timeline unresolved.
Read moreDetails
Microsoft Says CVSS 10.0 Entra ID Code Execution Flaw Was Exploited Before Server-Side Fix
Microsoft disclosed on Thursday that a maximum-severity remote code execution vulnerability in Entra ID, the identity service underpinning Microsoft 365,...
Read moreDetails
The Cyber Express Weekly Roundup: Tax Data Breach, AI Security Risks, and Critical GitLab Flaw
This week’s cyber roundup covers major data breaches, AI security risks, a Ukraine agency attack, and a critical GitLab vulnerability.
Read moreDetails
Critical GitLab Flaw Lets Hackers Alter or Delete Public Projects
GitLab has patched CVE-2026-19478 and CVE-2026-19650, two flaws that could allow unauthenticated attackers to modify data or execute mutations.
Read moreDetails
Microsoft August 2026 Patch Tuesday Fixes 400 Flaws, Including Three Zero-days
Microsoft’s August 2026 Patch Tuesday fixes roughly 400 flaws, including three Zero-days, with one actively exploited and two publicly disclosed.
Read moreDetails
Gunra Ransomware Builds a New Attack Network Through RaaS
The joint advisory was published August 10, 2026, as part of the ongoing #StopRansomware initiative.
Read moreDetails
CVE-2026-20316 Zero-Day Actively Exploited, Cisco Releases Fix
Cisco fixes CVE-2026-20316, a Cisco Secure FMC zero-day exploited in the wild. Horizon3.ai reported the flaw as CISA mandates fixes.
Read moreDetails
CVE-2026-63077 Exposes TeamCity Servers to Unauthenticated RCE
The advisory states that CVE-2026-63077 affects TeamCity On-Premises servers accessible over HTTP(S).
Read moreDetails
Critical wp2shell Vulnerability Hits WordPress Core, Patch Released
The wp2shell vulnerability exposed WordPress to unauthenticated RCE. Discover affected versions, patches, risks, and key mitigation steps.
Read moreDetails
Q1 2026 Threat Reports
Latest Cyber News
Web Stories
