Vulnerabilities and CVEs news | Cyber Security News

Exploited now3 reports

ExploitedCVE-2026-65660

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known…

The Hacker News10:49

Exploited

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S.

Security Affairs09:42

Exploited

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving…

BleepingComputer23:41

Today5 entries

11:55 Vulnerability

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

The Hacker News

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

08:17 Vulnerability

CVE-2026-95510: GNU Inetutils: use of uninitialized struct sigaction

CVE-2026-95510oss-security

02:47 Patch

Beta Channel Update for ChromeOS / ChromeOS Flex

Chrome Releases

01:00 Vulnerability

3 Consulting Myths Debunked by Unit 42 Experts

Palo Alto Networks Unit 42

3 Consulting Myths Debunked by Unit 42 Experts

00:31 Vulnerability

CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX

CVE-2026-100310oss-security

Yesterday12 entries

23:48 Vulnerability

CVE-2026-91206: Apache Roller: Reflected XSS in the optional LDAP comment authenticator

CVE-2026-91206oss-security

23:46 Vulnerability

CVE-2026-91204: Apache Roller: Stored javascript: URI in HTML comments

CVE-2026-91204oss-security

23:45 Vulnerability

CVE-2026-86507: Apache Roller: Stored XSS in comment moderation via comment author URL

CVE-2026-86507oss-security

23:43 Vulnerability

CVE-2026-82546: Apache Roller: Stored cross-site scripting through incoming Trackback links

CVE-2026-82546oss-security

23:41 Vulnerability

CVE-2026-82387: Apache Roller: Stored cross-site scripting via uploaded media content type

CVE-2026-82387oss-security

23:39 Vulnerability

CVE-2026-82386: Apache Roller: XML external entity processing in OPML bookmark import

CVE-2026-82386oss-security

23:37 Vulnerability

CVE-2026-82385: Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files

CVE-2026-82385oss-security

23:35 Vulnerability

CVE-2026-82384: Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

CVE-2026-82384oss-security

23:33 Vulnerability

CVE-2026-82383: Apache Roller: Anonymous setup action allows frontpage configuration tampering

CVE-2026-82383oss-security

23:31 Vulnerability

CVE-2026-82382: Apache Roller: Reflected cross-site scripting in the frontpage directory parameter

CVE-2026-82382oss-security

23:30 Vulnerability

CVE-2026-82381: Apache Roller: Stored cross-site scripting in the authoring UI

CVE-2026-82381oss-security

23:28 Vulnerability

CVE-2026-82380: Apache Roller: CSRF protection bypass via self-generated salt validation

CVE-2026-82380oss-security