Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities
CISA added CVE-2026-48939 and CVE-2026-56291 to KEV after active zero-day attacks targeted Joomla iCagenda and Balbooa extensions.
Read moreDetails
Ubiquiti Fixes Critical CVE-2026-50746 and Multiple UniFi OS Vulnerability Flaws
Ubiquiti fixes CVE-2026-50746 and 24 other UniFi OS vulnerabilities, urging users to update affected applications and devices immediately.
Read moreDetails
CERT Warns of Unpatched Tenda Firmware Backdoor Allowing Admin Access
CERT disclosed CVE-2026-11405, an unpatched Tenda firmware backdoor enabling admin access through authentication bypass on devices.
Read moreDetails
Wireshark 4.6.7 Fixes 12 Security Issues Across SSH, IEEE 802.11, Catapult DCT2000 and Other Protocols
Wireshark 4.6.7 fixes 12 security flaws and 16 bugs across SSH, IEEE 802.11, Catapult DCT2000, extcap, parsers and file readers.
Read moreDetails
Januscape Flaw in Linux KVM’s MMU Code Enables VM Escape on Intel and AMD
Januscape (CVE-2026-53359) is a Linux KVM vulnerability in the shadow MMU code that allows VM escape and host compromise on...
Read moreDetails
Apple Security Update Patches 30+ Vulnerabilities in iOS 26.5.2
Apple said the flaws were addressed through improved memory management, input validation, bounds checking, and stronger security origin tracking.
Read moreDetails
CVE-2026-20245 Zero-Day Exploited in Cisco Catalyst SD-WAN Manager to Gain Root Access
A threat actor exploited CVE-2026-20245 in Cisco Catalyst SD-WAN Manager to gain root access, steal data, and erase forensic evidence.
Read moreDetails
Multiple Vulnerabilities in QNAP NAS Devices Resolved Through Security Updates
Multiple vulnerabilities in QNAP NAS, including CVE-2025-59382, have been patched after exposing devices to code execution and DoS risks.
Read moreDetails
CVE-2026-48907 and LiteSpeed cPanel Plugin Flaws Come Under Active Attack
CVE-2026-48907 and a LiteSpeed cPanel plugin flaw are under active attack, exposing Joomla sites and shared hosting servers to compromise.
Read moreDetails
New iPhone BootROM Flaw Enables Hardware-Level Compromise
Researchers reveal iPhone BootROM vulnerability impacting A12, A13 and Apple Watch, enabling SecureROM code compromise via USB controller flaw.
Read moreDetailsQ1 2026 Threat Reports
