Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
Microsoft May 2026 Patch Tuesday Fixes 120 Vulnerabilities, No Zero-Day Exploits Reported
Microsoft May 2026 Patch Tuesday delivers fixes for 120 vulnerabilities, including critical remote code execution flaws.
Read moreDetails
Dirty Frag Linux Vulnerability Exposes Major Distributions to Root Access Attacks
Dirty Frag is a new Linux LPE vulnerability that chains two flaws to gain root access on major Linux distributions...
Read moreDetails
Salesforce Marketing Cloud Vulnerabilities Expose Cross-Tenant Subscriber Data Risks
Critical Salesforce SFMC vulnerabilities in AMPScript and CloudPages exposed subscriber data, email records, and cross-tenant risks.
Read moreDetails
PAN-OS Flaw CVE-2026-0300 Exposes Firewalls to Remote Code Execution
CVE-2026-0300 Buffer Overflow Vulnerability in PAN-OS allows attackers to gain root access via User-ID Authentication Portal exploitation.
Read moreDetails
CVE-2026-41940: Critical cPanel Authentication Bypass Exposes Hosting Systems
CVE-2026-41940 exposes cPanel to auth bypass risks. Learn affected versions, patches, mitigation steps, and how to detect compromise early.
Read moreDetails
GitHub Fixes Critical RCE Bug CVE-2026-3854 Within Hours of Discovery
CVE-2026-3854 RCE vulnerability in GitHub Enterprise Server enables code execution via git push due to improper input sanitization flaw.
Read moreDetails
Notepad++ Releases 8.9.4 Patch to Fix String Injection Vulnerability (CVE-2026-3008) in 8.9.3
CVE-2026-3008 exposes a Notepad++ vulnerability in v8.9.3 that may crash apps or leak memory data. Updating to v8.9.4 is strongly...
Read moreDetails
Litecoin Hit by Zero-Day Vulnerability, Triggers 13-Block Reorganization
A zero-day vulnerability triggered a 13-block reorg on Litecoin, impacting mining pools. The Litecoin team responded quickly, patching the issue...
Read moreDetails
CISA Adds 8 Exploited Vulnerabilities Affecting Cisco, Zimbra, TeamCity
CISA expands KEV catalog with eight actively exploited vulnerabilities affecting Cisco Catalyst and others, including CVE-2023-27351 and CVE-2024-27199.
Read moreDetails
Ivanti Neurons ITSM Vulnerabilities Could Allow Session Persistence
Vulnerabilities in Ivanti Neurons could allow session hijacking or persistent access after deactivation. Update to version 2025.4 to mitigate risk.
Read moreDetailsQ1 2026 Threat Reports
