Jump to: 🔥 Challenge News ⚡ Intel 🔬 Research Labs 📡 All News →

Cybersecurity News

Aggregated daily from 25 sources. Updated automatically every morning.

CISA NCSC UK SANS ISC The Hacker News Bleeping Computer Krebs on Security Dark Reading SecurityWeek Exploit-DB CERT-In Google Project Zero PortSwigger Research Check Point Research Cisco Talos CrowdStrike Unit 42 Elastic Security Labs SentinelOne WithSecure Labs Avast Threat Labs ZDI 0days in the Wild Lakera AI Security Embrace the Red Simon Willison
273 items (filtered) Last updated: –
A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Brandon Evans (@0x1nsomnia), Michael DePlante (@izobashi), and John Simpson (@Thracky) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-10-23, 2 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-23, 2 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Berat.I' was reported to the affected vendor on: 2026-10-23, 2 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-23, 2 days ago. The vendor is given until 2027-02-20 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-10-22, 1 days ago. The vendor is given until 2027-02-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
Exploit-DB Exploits –
↗
A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Alex Williams from Pellera Technologies' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Leonardo Mazzorana, z0v3r1n' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.0 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Alex Williams from Pellera Technologies' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Minse Kim (s3min141)' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'lucasfutures' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'welpsigh' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 3.3 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N severity vulnerability discovered by 'WONJOON HWANG (@joon1337)' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 3.3 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Minse Kim (s3min141)' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N severity vulnerability discovered by 'Hyeontae Lee' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Elias Myllym\xc3\xa4ki' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 9.0 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'HYEONTAE LEE' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'WONJOON HWANG (@joon1337)' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'p1r0x' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 9.0 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Hyeontae Lee' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'lucasfutures' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Seokchan Yoon (https://ch4n3.kr)' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Lucas Miller of TrendAI Research' was reported to the affected vendor on: 2026-10-21, 1 days ago. The vendor is given until 2027-02-18 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.
ZDI Exploits –
↗
pizzafy-1.0 - SQLi
Exploit-DB Exploits –
↗
South River Technologies Titan MFT Server 26.0.0 - code execution
Exploit-DB Exploits –
↗