#уязвимость
-
Exploit Published for Unpatched Ubuntu Flaw: Container Escape to Host Root
A use-after-free bug in the Linux kernel's AF_UNIX socket subsystem lets an attacker break out of a container and gain root on the host. The kernel fix shipped on August 6, but Ubuntu has yet to release a patch for any affected LTS release.
-
Critical Next.js flaw: server code execution via a crafted SVG
ImageResponse, the feature that generates social preview images, can under certain conditions let an attacker run code on the server. Vercel shipped a fix on September 22.
-
F5 Patches Critical BIG-IP APM Zero-Day Allowing Unauthenticated RCE
CVE-2026-94127 threatens only systems where the APM module acts as an OAuth authorization server. F5 has shipped engineering hotfixes while attacks are already under way.
-
Check Point warns of a management server zero-day used in targeted attacks
The vendor says a flaw in its Security Management Server was exploited as early as July 23 and shipped a fix on September 22. In parallel, attackers are probing Spark firewalls through a VPN flaw.
-
D-Link warns of maximum-severity zero-day in DIR-822A routers
A maximum-severity flaw in legacy DIR-822A routers already has a public PoC exploit — and no patch is available yet.
-
Maxed-Out VeloCloud Orchestrator Flaw Already Under Active Attack
Arista warns that a new flaw in on-premises VeloCloud Orchestrator is being actively exploited. Only orchestrators that authenticate their Edge devices with certificates are at risk.
-
Linux Kernel Flaw Gives ARM64 KVM Guests Access to Host Memory
The CVE-2026-89775 bug in the Linux kernel's nested-virtualization code for ARM64 lets a guest read and write host memory — and, the researcher says, escape the guest to run code on the host.
-
Critical Vulnerability in Orkes Conductor: Unauthenticated RCE Exploited in Real-World Attacks
Fortinet reports active exploitation of the critical flaw CVE-2026-58138 in the Orkes Conductor workflow orchestration platform, which allows arbitrary commands to be executed without authentication.
-
Critical Check Point Vulnerability Opens Root Access to Management Servers
Check Point has released security updates for CVE-2026-91843, a critical vulnerability that allows code execution with root privileges on Security Management Server and Log Server management systems.
-
Ransomware Gangs Join Attacks on Critical VMware vCenter RCE Flaw
CISA warns that ransomware operations have joined the exploitation of a critical vCenter vulnerability that Broadcom patched back in July.
-
Critical Cisco Secure Email Gateway Vulnerability Exploited in Attacks
Cisco has warned of active exploitation of CVE-2026-76461, rated 9.8, which allows remote command execution with root privileges through a specially crafted email.
-
GitLab Patches Critical Path Traversal Flaw in Commits API
GitLab has urged administrators to update their servers immediately: the maximum-severity vulnerability CVE-2026-85706 lets unauthenticated attackers read arbitrary files. A second critical flaw in GraphQL was patched at the same time.
-
SAP Patches Critical OVERPASS Vulnerability Rated CVSS 10.0
SAP has released security updates, fixing a kernel vulnerability that allowed arbitrary commands to be executed on the server without authentication. Four critical flaws were patched in total.
-
ConnectWise Warns of New ScreenConnect Flaw — No Patch Yet
ConnectWise has disclosed temporary mitigations for a new vulnerability in its ScreenConnect remote access platform. A fix is promised later this week.
-
N-able rushes out a fix for a critical RCE flaw in N-central
N-able has released an emergency update for its N-central remote monitoring platform, patching a maximum-severity vulnerability that allows arbitrary code execution without authentication.
-
StyleSmuggler: An Unpatched Magento 0-Day Is Already Being Used to Break Into Stores
The Dutch firm Sansec has disclosed a critical vulnerability in Magento Open Source and Adobe Commerce that allows code execution on the server without authentication. Attacks are happening right now, and there's still no patch from Adobe.
-
Attacks on a Critical Authentication-Bypass Flaw in Citrix NetScaler Have Begun
Threat actors have started exploiting the critical CVE-2026-19490 vulnerability in Citrix NetScaler following the release of a working PoC exploit. The flaw allows authentication to be bypassed remotely and without privileges.
-
Critical Elementor Pro Vulnerability Being Used to Hijack WordPress Sites
The recently patched CVE-2026-32475 vulnerability in the popular Elementor Pro plugin allows attackers to upload a web shell and execute arbitrary commands on the server. Wordfence has already blocked around 200,000 attack attempts.
-
Hackers Attack the Sangoma Switchvox VoIP Platform Through SQL Injection
Attackers are mass-exploiting the CVE-2026-9586 vulnerability in Sangoma Switchvox, which allows unauthenticated code execution and the deployment of a reverse shell.
-
PaperCut Patches a 0-Day: Every Version of NG and MF at Risk
Print management software maker PaperCut has warned customers that a vulnerability affecting all versions of NG and MF is being actively exploited, and it has shipped an emergency patch.
- More