The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber ...

While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance ...

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report The vulnerability affects self-managed GitLab instances across all deployment types. GitLab.com is ...

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ...

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before ...

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname leads ...

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On September 22, 2026, F5 published a security advisory for CVE-2026-94127, a critical heap-based buffer ...

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On September 11, 2026, CVE-2026-85706 was added to the U.S. Cybersecurity and Infrastructure Security ...

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 ...

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report CVE-2026-83548 is a critical pre-authentication server-side request forgery (SSRF) vulnerability in the ...