$ vulnerability-intelligence --current
Vulnerability news.
Exploitation context.
Follow sourced security reporting, check a CVE against exploited-vulnerability catalogs, and browse the products affected. Start with an identifier or a product you manage.
$ latest from the desk
All articles →
Latest intelligence
all articles →
Explore exploited products
Products with multiple CVEs in our dataset and at least one CISA Known Exploited Vulnerabilities listing. Open a product to compare its tracked CVEs and source records.
Known Exploited Vulnerabilities
Apple Multiple Products Improper Authentication Vulnerability
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. CISA notes it can be chained with other Ivanti Connect Secure flaws.
Ivanti Connect Secure Predictable Identifier File Upload
CISA lists an exploited predictable-identifier flaw in Ivanti Connect Secure. A remote authenticated attacker can upload attacker-controlled files to a known location on disk.
Cisco ASA/FTD SSL VPN Secondary Auth Logic Error Enables Remote DoS
Logic errors in Cisco ASA/FTD SSL VPN secondary authentication let unauthenticated remote attackers reload the firewall, causing a denial-of-service condition.
Broadcom VMWare ESX Insufficient Logging Vulnerability
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Latest security news
Barracuda Patches Chainable Flaws Giving Root Access
Barracuda fixed CVE-2026-116606 and CVE-2026-111560, which together can bypass authorization and yield root. Restrict admin interfaces and patch now.
3AM Ransomware Hits UK School Estate, AI Use Suspected
Bitdefender documents a 3AM ransomware affiliate encrypting about 37 machines in a UK school estate. Command timing suggests automation. Confidence: low to moderate.
NCSC Expects AI-Driven Attacks on UK Infrastructure by 2028
The UK's cyber chief warned that AI will help criminals and states exploit long-tolerated weaknesses at scale. The NCSC's own report says it mostly sharpens old tactics.
Siemens IoT2050 Node-RED Flaw Exploited by Botnet
VulnCheck saw attacks on CVE-2026-58115, a CVSS 10.0 Node-RED flaw on Siemens SIMATIC IoT2050 Advanced. Siemens fixed it in August. Here is what to do.
Synology Warns of C3RB3R Ransomware Hitting Old DSM
Synology says attackers are exploiting a DSM flaw patched in December 2024 to encrypt NAS data with C3RB3R ransomware. The vendor names no CVE.
BTCPay Server Hot Wallets Drained on Outdated Instances
BTCPay Server's maintainer reports hot wallet thefts on instances running 2.4.1 or older. No credible drains reported on 2.4.7. Investigation is ongoing.