Xen Orchestra auth bypass exploited for admin and root access
Vates fixed VSA-2026-062, which has no CVE yet, in Xen Orchestra 6.9.1 and 6.10.0 and xo-server 5.211.2 and 5.213.1.
Stories per day · 30 days
14 RSS
Relatedasyncos3cisco3cve-2026-765193cisa2kev2php2root2secure-email-gateway2atlassian1auth-bypass1authorization-bypass1cert-eu1cms1commerce-core1cve-2026-215891dll-hijacking1drupal1email-gateway1
63 stories, newest first · one card per story
Stories tagged #active-exploitation
Drupal Commerce Core authorization bypass actively exploited
CVE-2026-118539 affects Commerce Core 0.0.0–2.41 and 3.0.0–3.3.13; Drupal says to upgrade to 8.x-2.41 or 3.3.13.
1
WordPress 7.1.4 fixes 22 flaws, including RCE under attack
Wordfence says unauthenticated RCE in WordPress 4.7 through 7.1.3 drew more than 18,500 exploit requests in 21 hours; successful compromises are not confirmed.
CISA orders agencies to patch two targeted PHP bugs by Thursday
CVE-2026-109618 and CVE-2026-109619 drew thousands of failed attempts; confirmed successful exploitation remains unproven.
Actively exploited VeloCloud Orchestrator flaw grants superuser access
The headline names CVE-2026-114625 as exploited; the supplied page text does not state versions or a fix.
1
Siemens Software Center before 4.0.9.8 allows local DLL hijack
Siemens says the flaw has known active exploitation and that existing installs auto-update to 4.0.9.8 on next startup.
5
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Atlassian flaw CVE-2026-21589, which exposes files to external parties, to the KEV catalog.
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
Cisco says attackers are exploiting CVE-2026-76519 in Secure Email Gateway to write files and run commands as root.
3
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
Actively exploited CVE-2026-76519 lets unauthenticated attackers gain root on Cisco Secure Email Gateway.
4
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Cisco says attackers are exploiting critical Secure Email Gateway flaw CVE-2026-76519 to write files and gain root.
3
Four ways back in: the WordPress XSS campaign that hides its own admin account
Attackers are exploiting stored XSS in two WordPress plugins to install hidden admin backdoors.
15
Citrix NetScaler security snafus get even worse amid more 0-day reports
Attackers are exploiting unpatched Citrix NetScaler CVE-2026-88779, a SAML memory overflow that causes denial of service.
Apple and a Hacker's Future
Attackers are exploiting macOS screen-sharing flaw CVE-2026-65400 on exposed port 5900 to install Monero miners.
6
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Citrix NetScaler flaw CVE-2026-88779 to the KEV catalog.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Apple out-of-bounds write CVE-2026-86950 to the KEV catalog.
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
Weekly recap led by actively exploited Citrix NetScaler ADC/Gateway flaws CVE-2026-88771 and CVE-2026-88772, plus the $387M Bitget hack and EvilTokens takedown.
Citrix Patches Critical Zero Days Under Active Exploitation
Citrix patched two actively exploited critical NetScaler zero-days enabling unauthenticated remote code execution.
AL26-024 - Critical vulnerabilities affecting Citrix NetScaler ADC and NetScaler Gateway – CVE-2026-88771 and CVE-2026-88772
Canada's Cyber Centre warns critical Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 are being exploited worldwide.
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Two critical Citrix NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, are exploited for remote code execution.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added actively exploited Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 to the KEV catalog.
Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities
Two unpatched Citrix NetScaler zero-days enabling remote code execution are reportedly under active attack, with no vendor patch.
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
watchTowr says two unpatched Citrix NetScaler remote code execution zero-days are under active exploitation.
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
CISA added exploited Microsoft SharePoint and MikroTik RouterOS flaws to KEV, due September 28.
WordPress patches a critical severity security vulnerability
WordPress patched critical unauthenticated RCE CVE-2026-87902 in 7.1.2; attackers weaponized pearcmd.php within hours of disclosure.