ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
CVE-2026-82384: Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint
Microsoft SharePoint Flaw Lets Low-Privilege Attackers Execute Remote Code
4 sources 3 min
SolarWinds Observability Flaws Let Unauthenticated Attackers Execute Remote Code
5 sources 3 min
ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability
VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control
2 min
ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability
WordPress Events Calendar Vulnerabilities Let Hackers Take Over 600,000 Websites
4 min
Critical Dell ObjectScale Vulnerabilities Allows Malicious Users to Compromise the Affected system
3 min2
[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
1
CVE-2026-57822: Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service
Ivanti Patches Critical Flaws Across Enterprise Security Products
2 min2
SAP Patches Maximum Severity “Overpass” Flaw
2 min
Ivanti Patches 10 EPMM, Neurons for ITSM and Sentry Flaws Enabling RCE and Admin Access
3 min1
CVE-2026-34486: Apache Software Foundation Apache Tomcat
in the wild 2 min2
CVE-2026-34486: Apache Tomcat EncryptInterceptor Fail-Open Bypass
13 min1
[0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8)
Ivanti EPMM, Neurons and Sentry Vulnerabilities Enable Privilege Escalation and RCE Attacks
3 min1
CVE-2026-50522: Patch Critical SharePoint RCE Now
7 min1
2026-009: Critical Vulnerabilities in Microsoft SharePoint
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
in the wild 4 min
Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation via Insecure Reflection in Payara Server
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
5 min1