Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
CVE-2026-84115 in Cleo Harmony: JWT Refresh Token Handler Flaw Exposes Remote Attack Risk
CVE-2026-84115 affects Cleo Harmony through version 5.8.1.10, with a JWT Refresh Token Handler flaw enabling remote privilege escalation.
Read moreDetails
SonicWall Warns of Two Actively Exploited SMA1000 Zero-Days, One Rated Maximum Severity
SonicWall says attackers are chaining two SMA1000 zero-days, including a CVSS 10.0 pre-auth SSRF flaw, for remote code execution. Emergency...
Read moreDetails
AshSqlite Vulnerability (CVE-2026-77846) Exposes Hidden JSON Fields
CVE-2026-77846 is an AshSqlite vulnerability that can expose hidden JSON fields through unsafe JSON path handling when untrusted input is...
Read moreDetails
Ledger Fixes Ethereum App Flaw as Disclosure Timeline Is Disputed
Ledger says its Ethereum app flaw was fixed before TestMachine's disclosure, but missing release details leave the patch timeline unresolved.
Read moreDetails
Microsoft Reverses Its Own ‘Exploitation’ Warning on Entra ID Flaw CVE-2026-69836
Microsoft does a U-turn on CVE-2026-69836 Entra ID bug's "exploitation" status. Now says its not exploited.
Read moreDetails
Critical GitLab Flaw Lets Hackers Alter or Delete Public Projects
GitLab has patched CVE-2026-19478 and CVE-2026-19650, two flaws that could allow unauthenticated attackers to modify data or execute mutations.
Read moreDetails
Microsoft August 2026 Patch Tuesday Fixes 400 Flaws, Including Three Zero-days
Microsoft’s August 2026 Patch Tuesday fixes roughly 400 flaws, including three Zero-days, with one actively exploited and two publicly disclosed.
Read moreDetails
CVE-2026-20316 Zero-Day Actively Exploited, Cisco Releases Fix
Cisco fixes CVE-2026-20316, a Cisco Secure FMC zero-day exploited in the wild. Horizon3.ai reported the flaw as CISA mandates fixes.
Read moreDetails
CVE-2026-63077 Exposes TeamCity Servers to Unauthenticated RCE
The advisory states that CVE-2026-63077 affects TeamCity On-Premises servers accessible over HTTP(S).
Read moreDetails
Critical wp2shell Vulnerability Hits WordPress Core, Patch Released
The wp2shell vulnerability exposed WordPress to unauthenticated RCE. Discover affected versions, patches, risks, and key mitigation steps.
Read moreDetailsQ1 2026 Threat Reports
