Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
Critical Ghost CMS Vulnerability Exploited to Hack 700+ Websites
CVE-2026-26980 allowed attackers to exploit Ghost CMS sites and inject malicious JavaScript across 700+ compromised websites.
Read moreDetails
Microsoft Patches Actively Exploited Defender Vulnerabilities Affecting Enterprise Systems
Microsoft confirms active exploitation of CVE-2026-41091 and CVE-2026-45498 in Defender, raising CVSS-based risks and urgent KEV listing concerns.
Read moreDetails
Cisco Secure Workload Flaw CVE-2026-20223 Gets Maximum CVSS 10 Rating
Cisco addressed CVE-2026-20223, a CVSS 10.0 Secure Workload REST API vulnerability linked to CWE-306 authentication failures.
Read moreDetails
Pardus Linux Vulnerability Chain Enables Complete System Takeover
CVE-2026–5140 exposes critical flaws in Pardus Linux, allowing attackers to gain root access without authentication in seconds.
Read moreDetails
Critical ChromaDB Flaw Exposes AI Vector Databases to Remote Code Execution
ChromaDB FastAPI CVE-2026-45829 (ChromaToast) enables pre-auth RCE via HuggingFace model loading before authentication, impacting v1.0.0–1.5.8 risk!!
Read moreDetails
Fragnesia Linux Kernel Flaw Enables Root Privilege Escalation
Fragnesia is a Linux Kernel flaw in XFRM ESP-in-TCP that enables local attackers to gain root access through page-cache corruption.
Read moreDetails
Malicious node-ipc npm Packages Trigger New Supply Chain Security Alarm
Researchers found malicious node-ipc tarballs containing a credential stealer that exfiltrated sensitive developer data via DNS TXT queries.
Read moreDetails
Exim BDAT Vulnerability Exposes Email Servers to Remote Attacks
The Exim BDAT vulnerability impacts Exim 4.97–4.99.2 using GnuTLS, exposing mail servers to memory corruption risks.
Read moreDetails
Microsoft May 2026 Patch Tuesday Fixes 120 Vulnerabilities, No Zero-Day Exploits Reported
Microsoft May 2026 Patch Tuesday delivers fixes for 120 vulnerabilities, including critical remote code execution flaws.
Read moreDetails
Dirty Frag Linux Vulnerability Exposes Major Distributions to Root Access Attacks
Dirty Frag is a new Linux LPE vulnerability that chains two flaws to gain root access on major Linux distributions...
Read moreDetails
Q1 2026 Threat Reports
Latest Cyber News
Web Stories
