60
60
60
60
60
60
60
45
45
60
50
Threat Advisory: Critical Apache Log4j vulnerability being exploited in the wild
60
60
60
45
60
60
60
45
60
57
60
60
45
60
60
60
60
CVE-2026-34908: Ubiquiti Networks UniFi OS Server access control ...
CVE-2026-34908, a CVSS 10.0 access-control bypass in Ubiquiti UniFi OS, was added to CISA's KEV catalog amid reported active exploitation.
CISA added CVE-2026-34908 to the Known Exploited Vulnerabilities catalog on June 23, 2026, with remediation due June 26 under BOD 26-04 guidance. The CVSS 10.0 improper access control flaw (CWE-284) in Ubiquiti UniFi OS allows unauthorized system changes without authentication. Multiple news reports referenced by the page describe the max-severity UniFi flaws being exploited in attacks, and an official patch is available.
68
Vulnerability giving attackers full control of Macs is under active exploitation
An actively exploited macOS screen-sharing vulnerability lets remote attackers log in without a password and take full control of Macs.
Ars Technica reports that a vulnerability in macOS screen sharing is under active exploitation, allowing remote hackers to log in to Macs without a password. Successful exploitation gives attackers full control of affected machines. The article excerpt does not include a CVE identifier, affected versions, or patch details.
85
60
60
57
60
60
60
57
60
Week in review: Exploited zero-day in Cisco email security appliances, Kali Linux 2025.4 released
60
Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited
60