Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of DisclosureThe Hacker News·Apr 24, 05:28 UTC · Apr 24, 2026Vulnerability in the wildCVE-2026-3998760
CVE-2026-39987: Marimo RCE exploited in hours after disclosureSecurity Affairs·Apr 11, 09:44 UTC · Apr 11, 2026Vulnerability in the wildCVE-2026-39987CVE-2026-3301760
Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)Help Net Security·Jul 8, 00:00 UTC · Jul 8, 2026Vulnerability in the wildCVE-2026-55255CVE-2026-3301760
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026The Hacker News·May 31, 12:13 UTC · May 31, 2026Vulnerability in the wildCVE-2026-3998760
CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosureSecurity Affairs·Apr 29, 20:12 UTC · Apr 29, 2026VulnerabilityCVE-2026-4220860
Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and SecretsSecurity Affairs·Jul 7, 21:16 UTC · Jul 7, 2026Vulnerability in the wildCVE-2026-20896160
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of DisclosureThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-4433860
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of DisclosureThe Hacker News·Mar 26, 06:26 UTC · Mar 26, 2026Vulnerability in the wildCVE-2026-33017CVE-2025-3248160
New Cloud Attack Targets Crypto CDN Meson Ahead of LaunchInfosecurity Magazine·Mar 12, 16:15 UTC · Mar 12, 2024VulnerabilityCVE-2021-312960
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of DisclosureThe Hacker News·May 9, 10:15 UTC · May 9, 2026Vulnerability in the wildCVE-2026-42208160
LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of DisclosureThe Hacker News·Apr 27, 04:26 UTC · Apr 27, 2026Vulnerability in the wildCVE-2026-33626CVE-2026-0740CVE-2026-384460
CISA sounds alarm on Langflow RCE, Trivy supply chain compromise after rapid exploitationHelp Net Security·Mar 27, 00:00 UTC · Mar 27, 2026Vulnerability in the wildCVE-2026-33017CVE-2026-33634160
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ StoriesThe Hacker News·Feb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild160
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ StoriesThe Hacker News·May 15, 00:00 UTC · May 15, 2026VulnerabilityCVE-2026-030060
Federal agencies now only have one more day to patch React2Shell bugThe Record·Dec 11, 19:54 UTC · Dec 11, 2025Vulnerability in the wildCVE-2025-5518260
GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 RepositoriesThe Hacker News·Mar 18, 04:03 UTC · Mar 18, 2025VulnerabilityCVE-2025-30066CVE-2023-49291160