January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office ZeroRecorded Future·Feb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509CVE-2026-23760CVE-2026-1281+1 CVEs160
QNAP: Patch Critical Remote Code Injection BugInfosecurity Magazine·Jan 31, 09:30 UTC · Jan 31, 2023VulnerabilityCVE-2022-27596160
SAP fixed 26 flaws in August 2025 Update, including 4 CriticalSecurity Affairs·Aug 13, 00:00 UTC · Aug 13, 2025VulnerabilityCVE-2025-42957CVE-2025-42950CVE-2025-27429+1 CVEs60
Firefox Blocks Inline and Eval JavaScript on Internal Pages to Prevent Injection AttacksThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2019Vulnerability55
New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI MotherboardsThe Hacker News·Dec 20, 13:28 UTC · Dec 20, 2025VulnerabilityCVE-2025-14304CVE-2025-11901CVE-2025-14302+1 CVEs60
Experts discovered a critical bug in Schneider Electric Vehicle Charging StationsSecurity Affairs·Dec 26, 14:40 UTC · Dec 26, 2018VulnerabilityCVE-2018-7800CVE-2018-7801CVE-2018-780260
Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, CrossPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-22954CVE-2022-22963CVE-2022-22965+20 CVEs60
MAGENTO 2.0.16 and 2.1.9 security update fixes critical flaw in the platformSecurity Affairs·Apr 1, 21:06 UTC · Apr 1, 2018Vulnerability55
Microsoft Tuesday August 2018Cisco Talos·Aug 14, 18:26 UTC · Aug 14, 2018VulnerabilityCVE-2018-8273CVE-2018-8302CVE-2018-8344+49 CVEs60
Security Patch Day for August includes the most critical Note released by SAP in 2019Security Affairs·Aug 14, 17:37 UTC · Aug 14, 2019VulnerabilityCVE-2019-0351CVE-2019-0344CVE-2019-034560
Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilitiesCisco Talos·May 13, 15:34 UTC · May 13, 2026Vulnerability in the wildCVE-2026-32161CVE-2026-33109CVE-2026-33844+22 CVEs60
SAP April 2018 Security Patch Day address critical flaws in web browser controls in SAP Business ClientSecurity Affairs·Apr 12, 06:14 UTC · Apr 12, 2018VulnerabilityCVE-2017-7668CVE-2018-2408CVE-2018-2409+8 CVEs60
Ubuntu’s Crash Report Tool Allows Remote Code ExecutionThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2016VulnerabilityCVE-2016-9949CVE-2016-995060
MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution AttacksThe Hacker News·May 5, 11:56 UTC · May 5, 2026VulnerabilityCVE-2026-2901460
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary CodeThe Hacker News·Aug 3, 06:40 UTC · Aug 3, 2026VulnerabilityCVE-2026-44827CVE-2026-45804CVE-2026-44513160
How to rethink risks with new cloud deploymentsHelp Net Security·Jun 21, 00:00 UTC · Jun 21, 2021Vulnerability55
Microsoft Patch TuesdayCisco Talos·Oct 10, 20:25 UTC · Oct 10, 2017VulnerabilityCVE-2017-11813CVE-2017-11822CVE-2017-11762+38 CVEs160
vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code ExecutionThe Hacker News·May 11, 03:55 UTC · May 11, 2026VulnerabilityCVE-2026-24118CVE-2026-24120CVE-2023-37466+11 CVEs60
Fortinet fixed a critical RCE bug in FortiClientLinuxSecurity Affairs·Apr 10, 18:15 UTC · Apr 10, 2024Vulnerability in the wildCVE-2023-4559060
Containers on fire: from container escapes to supply chain attacksKaspersky Securelist·Jun 1, 10:00 UTC · Jun 1, 2026Vulnerability in the wildCVE-2019-5736CVE-2022-0492CVE-2024-21626160
VMware fixes CVE-2020Security Affairs·May 20, 22:17 UTC · May 20, 2020VulnerabilityCVE-2020-3956CVE-2020-395260
Huawei router exploit (CVE-2017-17215) involved in Satori and Brickerbot was leaked onlineSecurity Affairs·Dec 29, 14:20 UTC · Dec 29, 2017VulnerabilityCVE-2017-1721560
High-Tech Bridge reinforces ImmuniWeb with IAST technologyHelp Net Security·Jun 7, 00:00 UTC · Jun 7, 2017Vulnerability55
Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarmingSecurity Affairs·May 13, 19:28 UTC · May 13, 2026Vulnerability in the wildCVE-2026-42898CVE-2026-41089CVE-2026-41096+4 CVEs60
Microsoft offers rewards for security bugs in Microsoft TeamsHelp Net Security·Mar 25, 00:00 UTC · Mar 25, 2021Vulnerability55
Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)Help Net Security·Jul 22, 13:36 UTC · Jul 22, 2025Vulnerability in the wildCVE-2025-47981CVE-2025-49719CVE-2025-49717+2 CVEs160
Multiple Vulnerabilities Reported in Checkmk IT Infrastructure Monitoring SoftwareThe Hacker News·Nov 2, 13:11 UTC · Nov 2, 2022Vulnerability55
The Future of Serverless Security in 2025: From Logs to Runtime ProtectionThe Hacker News·Nov 28, 11:30 UTC · Nov 28, 2024Vulnerability in the wild60
Popular AMP Plugin for WordPress Patches Critical FlawThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2018Vulnerability55
Amazon Alexa Bugs Could've Let Hackers Install Malicious Skills RemotelyThe Hacker News·Aug 24, 08:15 UTC · Aug 24, 2020Vulnerability55
Flickr affected by critical SQL Injection and Remote Code Execution bugsSecurity Affairs·Apr 15, 12:59 UTC · Apr 15, 2014Vulnerability55
Microsoft Patch TuesdayCisco Talos·Sep 12, 22:41 UTC · Sep 12, 2017VulnerabilityCVE-2017-8628CVE-2017-8747CVE-2017-8749+25 CVEs60
Attackers exploit Funnel Builder bug to inject e-skimmers into eSecurity Affairs·May 17, 12:25 UTC · May 17, 2026Vulnerability in the wild60
Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution FlawsThe Hacker News·Dec 10, 09:13 UTC · Dec 10, 2025VulnerabilityCVE-2025-59718CVE-2025-59719CVE-2025-10573+6 CVEs60
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation FlawsThe Hacker News·May 18, 17:02 UTC · May 18, 2026VulnerabilityCVE-2026-8043CVE-2026-44277CVE-2026-26083+8 CVEs160
GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden PromptsThe Hacker News·May 23, 04:34 UTC · May 23, 2025Vulnerability55
Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to TargetsThe Hacker News·Jul 11, 04:04 UTC · Jul 11, 2025Vulnerability55
VMware fixed critical authentication bypass vulnerabilitySecurity Affairs·Aug 9, 22:51 UTC · Aug 9, 2022VulnerabilityCVE-2022-31656CVE-2022-31657CVE-2022-31658+7 CVEs60
Critical Bugs in Rockwell PLC Could Allow Hackers to Implant Malicious CodeThe Hacker News·Apr 1, 12:31 UTC · Apr 1, 2022VulnerabilityCVE-2022-1161CVE-2022-115960