LiteSpeed cPanel Plugin Vulnerability Being Exploited for Root Access
CVE-2026-48172 allows attackers to execute arbitrary scripts with elevated permissions on affected systems.
Tag: active exploitation
CISA Adds Drupal Core SQL Injection Flaw to KEV
Critical vulnerability CVE-2026-9082 affecting all supported Drupal versions is being actively exploited in the wild.
Microsoft Defender vulnerabilities actively exploited in wild attacks
Two flaws in Microsoft Defender allow privilege escalation and denial-of-service, with active exploitation confirmed.
Microsoft Exchange Server vulnerability CVE-2026-42897 under active exploitation
Cross-site scripting flaw in on-premise Exchange servers enables spoofing attacks via crafted emails.