Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
651 matching stories — incident — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cisco ASA and FTD CVE-2026-20349 Exploited Cisco has confirmed active exploitation of CVE-2026-20349 , a High-severity denial-of-service (DoS) vulnerability affecting the Remote Access SSL VPN service in Cisco Secure Fir
A type confusion flaw in n8n's Send Email node lets crafted workflow input reach the mail library as a file path or URL, exposing local files and enabling SSRF.
A flaw in the Remote Access SSL VPN service of Cisco ASA and FTD software lets an unauthenticated attacker reload the device, knocking firewalls and VPN gateways offline.
An authentication bypass in PicketLink Federation lets an unauthenticated attacker forge SAML assertions and sign in to JBoss EAP applications as any user, including administrators.
CVE-2026-55040, a critical SharePoint authentication bypass, is now being actively exploited. A proof-of-concept went public on August 11. Within 24 hours, threat intelligence firm Defused confirmed exploitation attempts against its. The post SharePoint CVE-2026-55040 Actively Exploited: AI-Discovered RCE Chain appeared first on Indusface.
Overview In August 2026, the UK AI Security Institute (AISI) disclosed a startling security incident: during routine cybersecurity capability evaluations, Anthropic’s Mythos 5 and OpenAI’s GPT-5.6 Sol models, without receiving any explicit attack instructions, autonomously decided to launch unauthorized actions against real open-source project maintainers and external systems. Their specific behaviors included: implanting malicious payloads […] The post AI Security Incident Cas
Analyse der kritischen Schwachstelle CVE-2026-18691 (CVSS 9.0) in MongoDB Server. Details zur Gefahr der Kompromittierung von Replica Sets und empfohlene Maßnahmen. The post CVE-2026-18691: Schwachstelle in MongoDB Server ermöglicht Übernahme von Cluster-Knoten appeared first on LocateRisk.
Metabase disclosed that certain versions of Metabase are affected by a critical SQL injection vulnerability. Here's how to find affected assets with runZero.
Analyse der kritischen RCE-Schwachstelle CVE-2026-58231 (CVSS 10.0) in SAP Commerce Cloud. Betroffene Versionen, verfügbare Patches und empfohlene Maßnahmen für Unternehmen. The post CVE-2026-58231: Kritische Schwachstelle in SAP Commerce Cloud (CVSS 10.0) appeared first on LocateRisk.
OverviewOn July 14, 2026, Rapid7 and Microsoft disclosed CVE-2026-55040, an authentication bypass vulnerability affecting Microsoft SharePoint. Today we are publishing a technical analysis of the vulnerability along with an accompanying proof-of-concept (PoC) script.Figure 1: The Rapid7 Labs PoC for CVE-2026-55040.⠀A remote unauthenticated attacker can leverage CVE-2026-55040 to bypass authentication on a vulnerable SharePoint server, and perform operations as a SharePoint site user or administr
OverviewRapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution (RCE) against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft are disclosing the second vulnerability in this chain, the RCE vulnerability CVE-2026-63520. The first vulnerability in the chain, CVE-2026-55040, was disclosed by Rapid7 and Microsoft last month.Our full
CVE-2026-44772, CVSS 9.9: XSL transform parameters let an authenticated user make SAP MII fetch and execute a remote stylesheet. The gate ships disabled. The post SAP Note 3765948: Code Injection via SSRF in SAP MII (CVE-2026-44772) appeared first on RedRays - Your SAP Security Solution.
CVE-2026-44758, CVSS 9.1: the SAP MII IllumXSLTServlet compiled a caller supplied stylesheet. SAP removed the endpoint rather than patching it. The post SAP Note 3758900: Code Injection in SAP MII (CVE-2026-44758) appeared first on RedRays - Your SAP Security Solution.
CVE-2026-44763, CVSS 7.6: a save path in the SAP MII SSCE interface was assembled without containment, letting files land outside the intended folder. The post SAP Note 3759854: Directory Traversal in SAP MII (CVE-2026-44763) appeared first on RedRays - Your SAP Security Solution.
Immediate action is advised for all organizations running self-hosted Metabase. A critical, unauthenticated SQL injection vulnerability has been disclosed in Metabase's password reset functionality, and Metabase has confirmed active exploitation in the wild.
XSS2Shell (CVE-2026-64638) is a pre-authentication reflected XSS on the WordPress login screen that escalates to PHP code execution against a logged-in administrator. A plain-English advisory, a ready-to-run non-destructive Nuclei detection template, the full 24-branch patched-version table, and how to detect affected WordPress at scale with Sn1per. The post XSS2Shell (CVE-2026-64638): WordPress Pre-Auth XSS to RCE Detection with Nuclei first appeared on Sn1perSecurity.
TL;DR: CVE-2026-64638, dubbed XSS2Shell, is a high-severity WordPress Core vulnerability that begins as a pre-authentication reflected XSS on the login screen and can be chained to PHP code execution when a logged-in administrator is successfully targeted. WordPress fixed the issue in 7.0.3 and backported the fix through maintained branches. Imperva Cloud WAF and On-Prem WAF […] The post Imperva Customers Protected Against XSS2Shell (CVE-2026-64638) in WordPress Core appeared first on Blog
The UK AISI logged AI agents escaping their sandbox during a cyber evaluation. Here is what a real sandbox looks like, and which control stops each event.
Two August 2026 NLTK disclosures show the PyPI package `nltk <= 3.9.4` could trust attacker-controlled corpora or model content too early: `_download_package()` could write and extract bytes before checksum enforcement, while `_unzip_iter()` accepted archive members in shared `corpora/` and `taggers/` namespaces without package-ownership checks.
Public 6 August exploit details for `CVE-2026-64564` show that Linux SCTP's ASCONF transport lifetime bug can move from an ordered `DEL-IP` sequence to a surviving use-after-free, direct-map disclosure, `commit_creds()`-based root, and container-to-host escape on real Debian, Ubuntu, and RHEL-family targets until kernels such as `6.6.148`, `6.12.101`, `6.18.42`, `7.1.6`, or `7.2-rc5` are deployed.
Apple’s latest macOS update addresses two vulnerabilities in its Screen Sharing server, including one that enables pre-authenticated remote code execution.
Dynatrace Security Researchers discovered a zero-day vulnerability in Langflow that allows any authenticated user to read, modify, or delete flows belonging to other users. Disclosed as CVE-2026-34046, this is a high severity vulnerability with a CVSS score of 8.7, affecting versions up to and including 1.5.0. To remediate this vulnerability in your environment, we strongly encourage to upgrade to version 1.5.1 or later. The post CVE-2026-34046: Broken authorization in Langflow exposes user flow
OverviewOn July 27, 2026, JetBrains published a security advisory for CVE-2026-63077, a critical unsafe deserialization vulnerability affecting JetBrains TeamCity. An attacker who can reach a TeamCity server over HTTP or HTTPS can exploit the agent polling protocol without credentials and execute operating system commands with the privileges of the TeamCity server process.JetBrains reported no known active exploitation when it disclosed the vulnerability. However, on August 5, 2026, CISA added C
XSS2Shell (CVE-2026-64638): Patch WordPress Now A new WordPress Core vulnerability chain called XSS2Shell turns a login page XSS bug into a much more serious risk for exposed WordPress sites. The issue is tracked as CVE-
On July 27, JetBrains disclosed a critical vulnerability in its TeamCity On-Premises software and stated that it was not aware of any active exploitation. On August 5, the US Cybersecurity and Infrastructure Security Agency added the same vulnerability to its Known Exploited Vulnerabilities catalog and gave federal agencies three days to patch. The vendor’s reassurance […] The post CVE-2026-63077: TeamCity Is Under Active Attack Right Now appeared first on CybelAngel.
A newly published August 2026 PyPI vulnerability shows Hugging Face `peft` loading LoRA-GA and CorDA cache artifacts with raw `torch.load()` calls instead of its own `weights_only=True` helper, so a hostile cache or covariance file can cross straight into pickle-backed code execution on ML training and inference hosts.
OpenAI's models autonomously breached Hugging Face. A technical postmortem of the first autonomous AI attack, and what agentic AI security must do now.
Kritische Schwachstellen (CVE-2026-28005, CVE-2026-6235, CVSS 9.8) in WordPress-Plugins Kadence WooCommerce Email Designer und Sendmachine ermöglichen unauthentifizierte Rechteausweitung. The post Kritische Lücken in WordPress-Plugins (CVE-2026-28005, CVE-2026-6235) appeared first on LocateRisk.
Summary On July 30th, 2026, SolarWinds released fixes for a critical Authentication-Bypass vulnerability in Web Help Desk (WHD) tracked as CVE-2026-28323, and a related high-severity Denial-of-Service vulnerability, tracked as CVE-2026-28299. Although no active exploitation has been observed yet, WHD is commonly internet-facing and the authentication bypass requires no credentials, making it a likely target once ... SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299
OX Research found and disclosed a Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin Vulnerability Details CVE: CVE-2026-44613 Description: Apache Zeppelin’s default CORS configuration allowed cross-origin, credentialed, state-changing requests (and accepted text/plain request bodies), letting a remote attacker who lures an authenticated user to a malicious site perform unauthorized actions through Zeppelin’s REST and WebSocket […] The post CVE-2026-44613: Turni
A Cl0p affiliate is chaining a FlexPLM information disclosure with an unauthenticated RCE in PTC Windchill to plant JSP web shells and run double-extortion data theft. Here are the detection signals and the triage workflow.
! Update 14. August 2026 N-able hat N-central 2026.3 Hotfix 2 (Build 2026.3.1.10) veröffentlicht, nachdem der Hersteller einen weiteren Angriffspfad im Zusammenhang mit CVE-2026-18577 identifiziert hatte. Hotfix 2 ergänzt weitere Härtungsmaßnahmen und ersetzt Hotfix 1 (2026.3.1.7). N-able zufolge wurde die neue Schutzmaßnahme am 6. August in gehosteten N-central-Umgebungen ausgerollt, während selbst gehostete Kunden manuell aktualisieren […]
CVE-2026-18556 and CVE-2026-18577 are authentication bypass vulnerabilities affecting N-able N-central. NodeZero® Rapid Response safely validates exposure and verifies remediation.
Overview On July 28, 2026, security researcher Håkon Måløy publicly disclosed a new attack technique called “AI Worming through Word”. The attack exploits a hint injection vulnerability in Microsoft Copilot for Word, allowing malicious instructions to self-replicate and spread in normal document workflows, forming a new type of document-based AI worm. This discovery will prompt […] The post AI Security Incident Case: Document Worm Achieves Self Replication and Propagation Via W
CVE-2026-9198 lets attackers chain two Langflow API endpoints for unauthenticated RCE. CISA confirms active exploitation. See fixes and AppTrana coverage. The post CVE-2026-9198: Critical Langflow RCE Under Active Exploitation appeared first on Indusface.
CVE-2026-58048 lets low-privilege cPanel accounts escalate to root database access via a public PoC. Explore risk details and how AppTrana blocks it. The post CVE-2026-58048: cPanel & WHM Database Privilege Escalation Vulnerability appeared first on Indusface.
N-able has released an emergency hotfix for an actively exploited authentication bypass in N-central, a remote monitoring and management platform widely used by managed service providers and internal IT teams. The flaw allows a remote, unauthenticated attacker to obtain administrative access to vulnerable N-central servers and use the platform’s legitimate management capabilities to reach downstream […] The post CVE-2026-18577: N-able N-central Authentication Bypass Lets Attackers Reach Ma
CVE-2026-42533 is a critical heap buffer overflow in the NGINX script engine reached through the map directive, with weaponized public exploit code that defeats ASLR. A plain-English advisory, a tested non-destructive Nuclei detection template, and the two-window version trap that makes naive scanners clear every mainline 1.31.x host as patched. The post CVE-2026-42533: NGINX map Directive Heap Buffer Overflow – Advisory + Nuclei Detection first appeared on Sn1perSecurity.
CVE-2026-42945, known as NGINX Rift, is a critical heap buffer overflow in ngx_http_rewrite_module reachable from a single unauthenticated request, with exploitation reported in the wild. A plain-English advisory, a tested non-destructive Nuclei detection template, a configuration audit template for the pattern nginx -t will not warn you about, and why upgrading to 1.30.1 leaves you exposed. The post CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module – Advisory + Nuclei Dete