Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
WP Maps Pro Vulnerability Exposed 15,000 WordPress Sites to Site Takeover
A WP Maps Pro vulnerability exposed WordPress sites to administrator account creation attacks through a vulnerable AJAX action.
Read moreDetails
Notepad++ Patches High-Severity RCE Flaws in Version 8.9.6.1
Notepad++ version 8.9.6.1 fixes CVE-2026-48778 and other flaws that could allow RCE attacks through malicious configuration files.
Read moreDetails
Critical Ghost CMS Vulnerability Exploited to Hack 700+ Websites
CVE-2026-26980 allowed attackers to exploit Ghost CMS sites and inject malicious JavaScript across 700+ compromised websites.
Read moreDetails
Microsoft Patches Actively Exploited Defender Vulnerabilities Affecting Enterprise Systems
Microsoft confirms active exploitation of CVE-2026-41091 and CVE-2026-45498 in Defender, raising CVSS-based risks and urgent KEV listing concerns.
Read moreDetails
Cisco Secure Workload Flaw CVE-2026-20223 Gets Maximum CVSS 10 Rating
Cisco addressed CVE-2026-20223, a CVSS 10.0 Secure Workload REST API vulnerability linked to CWE-306 authentication failures.
Read moreDetails
Pardus Linux Vulnerability Chain Enables Complete System Takeover
CVE-2026–5140 exposes critical flaws in Pardus Linux, allowing attackers to gain root access without authentication in seconds.
Read moreDetails
Critical ChromaDB Flaw Exposes AI Vector Databases to Remote Code Execution
ChromaDB FastAPI CVE-2026-45829 (ChromaToast) enables pre-auth RCE via HuggingFace model loading before authentication, impacting v1.0.0–1.5.8 risk!!
Read moreDetails
Fragnesia Linux Kernel Flaw Enables Root Privilege Escalation
Fragnesia is a Linux Kernel flaw in XFRM ESP-in-TCP that enables local attackers to gain root access through page-cache corruption.
Read moreDetails
Malicious node-ipc npm Packages Trigger New Supply Chain Security Alarm
Researchers found malicious node-ipc tarballs containing a credential stealer that exfiltrated sensitive developer data via DNS TXT queries.
Read moreDetails
Exim BDAT Vulnerability Exposes Email Servers to Remote Attacks
The Exim BDAT vulnerability impacts Exim 4.97–4.99.2 using GnuTLS, exposing mail servers to memory corruption risks.
Read moreDetailsQ1 2026 Threat Reports
