WPScan reports attackers are exploiting CVE-2026-123751 in the WP Duplicate WordPress plugin, an unauthenticated upload flaw leading to remote code
The UnrealIRCd team says attackers are exploiting CVE-2026-114713, a labeled-response flaw it calls the most critical issue in 15 years,
JPCERT/CC says attackers are exploiting CVE-2026-111793 in Openwave Webtop Media Transcoder, a flaw patched in December 2021 that exposes sensitive
A researcher published a working exploit for CVE-2026-57845, a CVSS 8.8 pickle deserialization flaw in Hugging Face datasets up to
A CVSS 9.9 flaw in the uucore crate of uutils coreutils let a crafted translation file inject Rust code at
Advisories detail ModSecurity flaw CVE-2026-104269, a WAF upload-rule bypass with a public PoC, and CVE-2026-73857, an XML crash bug. Both
IBM disclosed 208 vulnerabilities in API Connect, 47 critical and scored up to CVSS 9.9, plus a 9.8 flaw in
Apiiro found 2,539 secrets across 1,994 public GitHub repositories, leaked through Claude Code settings files created by the ‘don’t ask
OpenSSH 10.6p2 fixes a critical flaw that lets attackers log in to passwordless accounts on musl-based Linux such as Alpine
Microsoft fixed CVE-2026-83844, an out-of-bounds read in Paint on Windows 10 and 11 rated CVSS 8.1, with no exploitation or
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.