Vulnerability News

Ledger says its Ethereum app flaw was fixed before TestMachine's disclosure, but missing release details leave the patch timeline unresolved.

Microsoft does a U-turn on CVE-2026-69836 Entra ID bug's "exploitation" status. Now says its not exploited.

GitLab has patched CVE-2026-19478 and CVE-2026-19650, two flaws that could allow unauthenticated attackers to modify data or execute mutations.

Microsoft’s August 2026 Patch Tuesday fixes roughly 400 flaws, including three Zero-days, with one actively exploited and two publicly disclosed.

Cisco fixes CVE-2026-20316, a Cisco Secure FMC zero-day exploited in the wild. Horizon3.ai reported the flaw as CISA mandates fixes.

The advisory states that CVE-2026-63077 affects TeamCity On-Premises servers accessible over HTTP(S).

The wp2shell vulnerability exposed WordPress to unauthenticated RCE. Discover affected versions, patches, risks, and key mitigation steps.

Researchers uncovered a GitLab vulnerability that exploits Oj parser flaws through Jupyter Notebook files to achieve remote code execution.

The July 2026 Critical Patch Update resolves 1,449 Oracle security flaws across 334 products, including hundreds of critical remote vulnerabilities.

Anthony Alvarez’s lawsuit claims Apple misrepresented Hide My Email privacy protections after a reported vulnerability exposed user email addresses.