Vulnerability News

CISA added CVE-2026-48939 and CVE-2026-56291 to KEV after active zero-day attacks targeted Joomla iCagenda and Balbooa extensions.

Ubiquiti fixes CVE-2026-50746 and 24 other UniFi OS vulnerabilities, urging users to update affected applications and devices immediately.

CERT disclosed CVE-2026-11405, an unpatched Tenda firmware backdoor enabling admin access through authentication bypass on devices.

Wireshark 4.6.7 fixes 12 security flaws and 16 bugs across SSH, IEEE 802.11, Catapult DCT2000, extcap, parsers and file readers.

Januscape (CVE-2026-53359) is a Linux KVM vulnerability in the shadow MMU code that allows VM escape and host compromise on...

Apple said the flaws were addressed through improved memory management, input validation, bounds checking, and stronger security origin tracking.

A threat actor exploited CVE-2026-20245 in Cisco Catalyst SD-WAN Manager to gain root access, steal data, and erase forensic evidence.

Multiple vulnerabilities in QNAP NAS, including CVE-2025-59382, have been patched after exposing devices to code execution and DoS risks.

CVE-2026-48907 and a LiteSpeed cPanel plugin flaw are under active attack, exposing Joomla sites and shared hosting servers to compromise.

Researchers reveal iPhone BootROM vulnerability impacting A12, A13 and Apple Watch, enabling SecureROM code compromise via USB controller flaw.