60
Search: “National Vulnerability Database”
1,381 stories
60
60
Week in review: Veeam fixes RCE flaw in backup management platform, Patch Tuesday forecast
60
55
CVE-2026-50522: Patch Critical SharePoint RCE Now
Microsoft patched CVE-2026-50522 (CVSS 9.8), an unauthenticated deserialization RCE in on-premises SharePoint servers, in its July 2026 updates; no exploitation confirmed at disclosure.
CVE-2026-50522 is a critical (CVSS 9.8) deserialization of untrusted data flaw (CWE-502) allowing unauthenticated remote code execution on on-premises Microsoft SharePoint servers. It affects SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition, with fixes shipped in Microsoft's July 14, 2026 security updates; SharePoint Online is not listed as affected. No public evidence of active exploitation of this specific CVE existed at disclosure, though CISA's SSVC judged the attack automatable with total technical impact.
72
55
60
60
60
60
42
60
Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update
60
60
60
CISA decides weekly vulnerability bulletin isn't necessary anymore
CISA will discontinue its weekly vulnerability bulletin on September 28, pushing users toward KEV, alerts, and CVE data under risk-based prioritization.
CISA announced its weekly vulnerability bulletin will stop on Monday, September 28, as part of a shift from static CVSS severity scores to a modern, risk-based approach detailed in a June Binding Operational Directive. The directive prioritizes federal remediation based on exposure, exploitation evidence, control granted by exploitation, and whether exploitation can be automated. CISA directs bulletin subscribers to rely instead on its Known Exploited Vulnerabilities catalog, cybersecurity alerts and advisories, and the CVE catalog, requiring users to enable those subscriptions in GovDelivery or Granicus to avoid missing critical notices.
48
60
60
60
60
55
60
Urgent: Google Releases Critical Chrome Update for CVE-2025
60
60
60
60
Week in review: Attackers trying to access Check Point VPNs, NIST CSF 2.0 security metrics evolution
60
60
30
60
60
60
60
60
55
60
55
60
60