https://0daynews.com/articles/2026-09-22-wordpress-comment2shell-xss-rce-core/ 0dayNews en 2026-09-22T10:00:00.000Z WordPress Core XSS Flaw Enables RCE via Admin Sessions WordPress, XSS, RCE, stored cross-site scripting, comment injection, admin session, web security https://0daynews.com/articles/2026-09-22-wordpress-comment2shell-xss-rce-core/cover.jpg WordPress Core XSS Flaw Enables RCE via Admin Sessions https://0daynews.com/articles/2026-09-22-zyxel-veeam-kev-active-exploitation/ 0dayNews en 2026-09-22T09:00:00.000Z Zyxel, Veeam Flaws Confirmed Under Active Exploitation zyxel, veeam, cve-2026-7273, cve-2026-32996, cisa-kev, active exploitation, privilege escalation https://0daynews.com/articles/2026-09-22-zyxel-veeam-kev-active-exploitation/cover.jpg Zyxel, Veeam Flaws Confirmed Under Active Exploitation https://0daynews.com/articles/2026-09-22-shinyhunters-extorts-clop-victim-data-at-risk/ 0dayNews en 2026-09-22T08:00:00.000Z ShinyHunters Extorts Cl0p, Victim Data at Risk ShinyHunters, Cl0p, ransomware, extortion, victim data, cybercrime https://0daynews.com/articles/2026-09-22-shinyhunters-extorts-clop-victim-data-at-risk/cover.jpg ShinyHunters Extorts Cl0p, Victim Data at Risk https://0daynews.com/articles/2026-09-22-bigcommerce-ribon-app-supply-chain-breach/ 0dayNews en 2026-09-22T06:00:00.000Z BigCommerce Merchants Breached via Ribon App Credentials bigcommerce, supply-chain, data-breach, ribon, script-injection, third-party, e-commerce https://0daynews.com/articles/2026-09-22-bigcommerce-ribon-app-supply-chain-breach/cover.jpg BigCommerce Merchants Breached via Ribon App Credentials https://0daynews.com/articles/2026-09-21-crowdsec-source-code-stolen-tanstack-supply-chain/ 0dayNews en 2026-09-21T10:00:00.000Z CrowdSec Source Code Stolen in TanStack Attack crowdsec, supply-chain, source-code, tanstack, breach https://0daynews.com/articles/2026-09-21-crowdsec-source-code-stolen-tanstack-supply-chain/cover.jpg CrowdSec Source Code Stolen in TanStack Attack https://0daynews.com/articles/2026-09-21-keycloak-four-cves-iam-patch/ 0dayNews en 2026-09-21T10:00:00.000Z Red Hat Patches Four Keycloak IAM Flaws keycloak, red-hat, iam, authentication, authorization, cve, identity-management https://0daynews.com/articles/2026-09-21-keycloak-four-cves-iam-patch/cover.jpg Red Hat Patches Four Keycloak IAM Flaws https://0daynews.com/articles/2026-09-21-jade-sleet-india-it-provider-flatroof-roofdeck/ 0dayNews en 2026-09-21T09:00:00.000Z Jade Sleet Hits Indian IT Firm with Custom Backdoors jade-sleet, north-korea, apt, supply-chain, flatroof, roofdeck, india https://0daynews.com/articles/2026-09-21-jade-sleet-india-it-provider-flatroof-roofdeck/cover.jpg Jade Sleet Hits Indian IT Firm with Custom Backdoors https://0daynews.com/articles/2026-09-21-nvm-cve-2026-94185-path-traversal-alias/ 0dayNews en 2026-09-21T09:00:00.000Z CVE-2026-94185: nvm Alias Path Traversal, Update Now nvm, path-traversal, CVE-2026-94185, nodejs, supply-chain, developer-tools, ci-cd https://0daynews.com/articles/2026-09-21-nvm-cve-2026-94185-path-traversal-alias/cover.jpg CVE-2026-94185: nvm Alias Path Traversal, Update Now https://0daynews.com/articles/2026-09-21-redcap-cve-2026-90817-unauth-rce/ 0dayNews en 2026-09-21T06:00:00.000Z REDCap Patches CVSS 9.8 Unauth RCE via Survey Route REDCap, CVE-2026-90817, remote code execution, unauthenticated RCE, clinical research, medical research security https://0daynews.com/articles/2026-09-21-redcap-cve-2026-90817-unauth-rce/cover.jpg REDCap Patches CVSS 9.8 Unauth RCE via Survey Route