55
60
60
60
60
60
Week in review: 300k+ Plex Media Server instances still vulnerable to attack, exploited Git RCE flaw
60
Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)
60
60
60
60
60
60
Check Point Patches Critical VPN Vulnerabilities
Check Point patches two critical unauthenticated RCE flaws (CVE-2026-85102, CVE-2026-85103) in VPN gateways and firewalls; no exploitation observed.
Check Point released patches for CVE-2026-85102 and CVE-2026-85103, two critical vulnerabilities (CVSS 9.8) enabling unauthenticated remote code execution in products using VPN functionality. CVE-2026-85102 involves improper validation of certificate data during VPN negotiation, while CVE-2026-85103 is a heap overflow in the VPN certificate ASN.1 decoding flow. Updates cover versions R82.10, R82, and R81.20; manually defining VPN rules is offered as a mitigation, though it does not apply to locally managed Spark Firewall instances. Check Point discovered both flaws internally and reports no evidence of exploitation in the wild.
60
CISA Flags Langflow RCE, Tomcat, and N
60
Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits
60
60
60
30
60
Week in review: Sudo local privilege escalation flaws fixed, Google patches actively exploited Chrome
60
Zero-days dominate top frequently exploited vulnerabilities
60
Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug
60
47
60
30
60
60