Vulnerabilities — News

Up-to-date cyber intelligence coverage. Filter by category or browse the full archive.

Ecuador warns of active MikroTik RouterOS flaws

ECUCERT flagged three exploited CVEs in MikroTik RouterOS. Taiwan's NICS-TW and the Dutch DIVD also reported active attacks.

Sep 24, 2026 · 3 min

CISA added seven vulnerabilities to the KEV, including active exploitation in SonicWall SMA 1000, Kestra OSS, LiteLLM and Sangoma Switchvox.

Sep 12, 2026 · 3 min

CISA added CVE-2026-81578, CVE-2026-82078, and CVE-2026-82329 to KEV after active exploitation in PaperCut

Sep 6, 2026 · 2 min

CISA added exploited flaws in August, including Citrix NetScaler, Microsoft SQL Server and VMware vCenter, to its KEV catalog.

Aug 29, 2026 · 3 min

INCIBE-CERT issued alerts on PLCnext, Red Hat Quay, and OpenShift components, including one critical flaw with no active exploitation seen.

Aug 20, 2026 · 2 min

CISA added CVE-2026-34486 to KEV after active Apache Tomcat exploitation and set an Aug. 7 remediation deadline for federal agencies.

Aug 10, 2026 · 2 min

INCIBE-CERT issued an alert for five VMware vulnerabilities, including three critical flaws. One can bypass authentication in vCenter.

Aug 3, 2026 · 2 min

CISA says three SharePoint Server on-premises flaws are being actively exploited and urges patching plus tighter hardening.

Jul 19, 2026 · 3 min

CISA added CVE-2026-45659, a Microsoft SharePoint flaw, to its Known Exploited Vulnerabilities catalog after confirming active exploitation. Federal

Jul 6, 2026 · 2 min