Tag: CVSS

The wp2shell vulnerability exposed WordPress to unauthenticated RCE. Discover affected versions, patches, risks, and key mitigation steps.

CISA added CVE-2026-48939 and CVE-2026-56291 to KEV after active zero-day attacks targeted Joomla iCagenda and Balbooa extensions.

Ubiquiti fixes CVE-2026-50746 and 24 other UniFi OS vulnerabilities, urging users to update affected applications and devices immediately.

Microsoft confirms active exploitation of CVE-2026-41091 and CVE-2026-45498 in Defender, raising CVSS-based risks and urgent KEV listing concerns.

CVE-2026-33032 exposes nginx-ui servers to full takeover. Actively exploited flaw lets attackers bypass auth and control Nginx systems in seconds.

Adobe has released an urgent update for Acrobat Reader flaw CVE-2026-34621, a critical issue exploited in the wild that could ...

Firefox v147.0.4 addresses CVE-2026-2447, a heap buffer overflow in libvpx that may allow remote code execution via malicious video content.

CVE-2026-25049 is a critical n8n vulnerability that enables authenticated attackers to execute system commands by bypassing earlier security fixes.

CVE-2026-21858 exposes a critical n8n vulnerability where attackers exploit n8n webhook flaws to read files, bypass authentication, and execute commands.

CSA has issued an alert on CVE-2025-52691, a critical SmarterMail vulnerability that allows unauthenticated remote code execution.