#уязвимости
-
SAP Patches Critical Vulnerabilities in NetWeaver and Commerce Cloud
SAP has released its July security update package, fixing 16 vulnerabilities, three of which have been rated critical.
-
CISA Adds Vulnerabilities in the Joomla iCagenda and Balbooa Extensions to Its Exploited Catalog
The U.S. cybersecurity agency CISA has added two critical vulnerabilities in Joomla extensions to its catalog of known exploited vulnerabilities following reports of zero-day attacks.
-
Unauthenticated RCE Vulnerability Found in the Motorola MR2600 Router
A security researcher has reported a critical vulnerability in the Motorola MR2600 router that allows arbitrary code to be executed on the device without authentication. The details have been published in an open report.
-
Australia Warns of Global Campaign Targeting Vulnerable CMS Platforms
The Australian Cyber Security Centre (ACSC) has issued a warning about a large-scale campaign exploiting vulnerabilities in content management systems and their plugins. The attacks are affecting organizations around the world.
-
Six vulnerabilities found in the U-Boot bootloader open the door to stealthy firmware attacks
Researchers have discovered six vulnerabilities in the widely used U-Boot bootloader that let attackers execute malicious code while a device is booting. This can lead to security mechanisms being bypassed and persistent malware being installed.
-
Progress Urges Immediate Shutdown of ShareFile Servers Over Hacking Threat
Progress Software has sent ShareFile customers a warning about a “credible” external security threat and demanded that they shut down their servers immediately. It concerns users of on-premises Storage Zone Controllers.
-
Researcher Details an Attack Chain Against OpenClaw via WhatsApp
A security specialist has disclosed details of three already-patched vulnerabilities in the OpenClaw personal AI assistant that, when chained together, allowed an attacker to go from WhatsApp all the way to full control of the host. The vulnerabilities were rated as high severity.
-
Hackers Exploit Roundcube Vulnerability to Spy on Academics
A China-linked group is attacking vulnerable Roundcube servers at universities in the US and Canada, stealing credentials and installing backdoors.
-
CISA Orders U.S. Federal Agencies to Urgently Patch a Vulnerability in Langflow
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal agencies to remediate an actively exploited authentication bypass vulnerability in the Langflow platform by Friday.
-
Ubiquiti Patches Maximum-Severity Critical Vulnerability in UniFi OS
Ubiquiti has released security updates for UniFi OS, fixing seven critical vulnerabilities, one of which received the highest severity rating and allows command injection.
-
CISA Orders U.S. Federal Agencies to Fix Critical Adobe ColdFusion Flaw by Friday
The CISA agency has directed federal agencies to remediate a maximum-severity vulnerability in the Adobe ColdFusion platform, which is already being actively exploited by attackers.
-
A Zero-Day Vulnerability Hidden for Over 19 Years Found in the Linux Kernel
A researcher discovered and reported to Google's kernelCTF a zero-day vulnerability in the Linux kernel that had gone unnoticed for more than 19 years. The vulnerability has been assigned the identifier CVE-2026-43456.
-
BeyondTrust Warns of Critical Vulnerabilities in Remote Access Software
BeyondTrust has urged customers to immediately address two critical vulnerabilities in its Remote Support and Privileged Remote Access products. The flaws allow attackers to bypass authentication.
-
Maximum-Severity Adobe ColdFusion Vulnerability Already Under Exploitation
Attackers are exploiting CVE-2026-48282 in Adobe ColdFusion, which has been assigned the highest severity rating. The disclosure came from KEVIntel, a company specializing in vulnerability analysis.
-
Four vulnerabilities found in GNU Guix, including remote privilege escalation
The GNU Guix project has reported three vulnerabilities in the guix substitute utility and one more affecting the guix pull and guix time-machine commands. Users are advised to update guix and guix-daemon immediately.