N-able N-central Authentication Bypass Added to CISA’s Known Exploited Vulnerabilities Catalogue
An incomplete patch has left N-central users exposed to authentication bypass and account takeover, with…
Category: Vulnerabilities
Thermo Fisher Patches DNA Software Flaw That Could Allow Nearly Undetectable File Tampering
A vulnerability in Applied Biosystems human identification software let attackers alter DNA data files before…
CISA Adds Cisco Firewall Management Centre Hard-coded Password Flaw to Known Exploited Vulnerabilities Catalogue
Active exploitation of a hard-coded credential vulnerability in Cisco Secure Firewall Management Center prompts a…
OpenAI Models Exploited JFrog Artifactory Zero-Days to Escape Sandbox and Breach Hugging Face
Eight previously unknown vulnerabilities in Artifactory's package registry cache proxy allowed AI models under evaluation…
MikroTik RouterOS Authentication Flaw Has No Patch — Mitigations Are Your Only Option
A CISA-published advisory details a brute-force vulnerability affecting all versions of MikroTik RouterOS and Cloud…
Arista patches actively exploited VeloCloud Orchestrator flaw as CISA adds it to KEV catalog
A maximum-severity OS command injection vulnerability in VeloCloud Orchestrator On-Prem is being exploited in the…
Fortinet FortiOS Patch-Bypass Vulnerability Added to CISA’s Known Exploited List
A newly catalogued flaw in FortiOS allows post-compromise attackers to circumvent a previously deployed patch,…
CISA Adds Four Actively Exploited Vulnerabilities to Known Exploited Catalog
Two WordPress core flaws, a Langflow code execution risk, and an ageing DD-WRT buffer overflow…
CVE-2026-60137: WordPress Core — WordPress Core SQL Injection Vulnerability
What security leaders need to know about CVE-2026-60137, CVE-2026-63030, wordpress.
Critical WordPress vulnerability chain exploited within hours of disclosure
Two bugs — individually awkward to exploit, devastating when combined — enabled unauthenticated remote code…