⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Microsoft SharePoint: Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.
Oracle E-Business Suite has been identified with a critical vulnerability, CVE-2026-46817, involving improper privilege management. This flaw allows unauthenticated attackers with network access via HTTP to compromise Oracle Payments, potentially leading to a complete takeover of the system.
KNX Association's KNX Protocol Connection Authorization Option 1 contains a critical vulnerability (CVE-2023-4346) due to an overly restrictive account lockout mechanism. This flaw enables attackers to purge all devices lacking additional security options and set a BCU key to lock the device, effectively rendering it inaccessible.
Cisco has disclosed a critical vulnerability (CVE-2026-20316) in its Secure Firewall Management Center (FMC), formerly known as Firepower Management Center, involving a hard-coded password flaw. The vulnerability allows unauthenticated remote attackers to log in using a low-privileged account, potentially exposing sensitive data on affected systems.
DD-WRT DD-WRT: DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.
Fortinet FortiOS has a vulnerability (CVE-2025-68686) that exposes sensitive information to unauthorized actors. A remote attacker can bypass a previously implemented patch for symbolic link persistency by sending crafted HTTP requests, but only after first compromising the system via another filesystem-level exploit.