Administrators should verify the full platform-hotfix level, not only the major firmware branch. SonicWall says these vulnerabilities are unrelated to other reported vulnerabilities in other SonicWall ...

A critical authentication bypass vulnerability in JFrog Artifactory, tracked as CVE-2026-82329, is under active exploitation, posing an immediate threat to self-managed software supply chains ...

PaperCut disclosed two vulnerabilities in PaperCut NG and PaperCut MF that can be chained into a pre-authentication Remote Code Execution (RCE) path against vulnerable Application Servers. The flaws ...

The extortion group shinyhunters claimed Jack Henry & Associates as a victim on August 30, 2026. Jack Henry & Associates is a critical provider of financial technology infrastructure, operating with ...

Teletek Structures Inc., a Canadian technology company operating via teletekstructures[.]com, has been listed as a victim on the settra ransomware group’s dark web portal as of September 3, 2026.

Attackers are exploiting two separate critical vulnerabilities affecting Langflow and Ruby on Rails. CVE-2026-0768 allows unauthenticated attackers to execute Python code on affected Langflow ...

FalconFlank is an alleged privilege escalation zero-day vulnerability in CrowdStrike Falcon Sensor for Windows, published with working Proof-of-Concept (PoC) code by researcher Chaotic Eclipse. The ...

On August 27, 2026, SCA Logistik & Fulfillment GmbH, a German company specializing in supply chain and fulfillment services, was listed as a victim of the Aurora ransomware group. The listing was ...

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and ...

An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the ...

Get your free weekly report by email.

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows ...