Technology ❯ Cybersecurity ❯ Vulnerabilities

Software Vulnerabilities

Microsoft Security Updates Fortinet Microsoft Vulnerabilities Microsoft SharePoint Microsoft Windows Adobe Commerce Microsoft Products n8n Vulnerability VMware Vulnerabilities Microsoft Exchange Microsoft Software Microsoft Office Cisco ISE Android Security Browser Security CVE-2025-9491 Windows Server Update Service CVE-2025-54309 GPU Security Zoom Vulnerability Adobe Products CVE Listings Microsoft Security Patches Foxit PDF Tools PaperCut NG/MF CVE-2025-6558 Use After Free Apple Security GNU libmicrohttpd NVIDIA Display Driver GitLab Exchange Server Ruby WEBrick Vulnerability SmarterMail Vulnerabilities SAP NetWeaver Cisco Secure Firewall Management Center CVE-2025-26633 Commvault WhatsApp Vulnerability CVE-2025-7775 Citrix NetScaler Git Vulnerability Citrix Session Recording CVE-2025-48384 Git Cisco IOS Docker Vulnerabilities NetScaler CVE-2025-42957 macOS Vulnerabilities CVE-2025-24893 Cisco IOS and IOS XE SolarWinds Web Help Desk CVE-2025-6205 DELMIA Apriso CVE-2025-6204 Dassault Systèmes DELMIA Apriso GoAnywhere MFT CVE-2025-20352 CVE-2025-59689 CVE-2025-32463 CVE-2021-21311 CVE-2025-10035 Game Engine Vulnerabilities Redis Vulnerability CVE-2025-49844 Remote Code Execution CVE-2025-48703 FreePBX Oracle E-Business Suite SKYSEA Client View CVE-2025-54100 Adobe Experience Manager Dell CloudLink Cisco Security Software CVE-2025-11371 WinRAR Unbound DNS Vulnerability CVE-2025-62221 Rsync Vulnerability Patch Management Fortinet FortiWeb Windows Vulnerabilities Microsoft 7-Zip Vulnerability CVE-2025-11001 React Native Vulnerability Trend Micro Apex Central SonicWall SMA1000 Appliances MongoDB Vulnerability CVE-2026-20805 HPE OneView CVE-2025-64155 Cisco AsyncOS CVE-2026-20045 WordPress Plugins Endpoint Manager CVE-2026-21509 CVE-2025-68645 CVE-2025-31125 n8n Workflow Automation VMware vCenter Server

OpenClaw Fixes 'ClawJacked' Flaw That Let Websites Hijack Local AI Agents

Researchers urge immediate updates following a Feb. 26 fix.

CISA Puts Exploited FileZen Bug on KEV With March 17 Fix Deadline

Dell Patches RecoverPoint Zero-Day Exploited Since 2024 by Suspected China Group

Microsoft Patches High-Severity Notepad Markdown Flaw as Store Update Rolls Out

Ivanti Patches EPM as EPMM Exploitation Campaign Traces to Single Bulletproof-Hosted IP

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

Public Exploits Detail n8n Sandbox Escape That Lets Workflow Users Take Over Servers

CISA Forces Three-Day Patch for Actively Exploited SolarWinds Web Help Desk Flaw

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

n8n Issues Fixes After JFrog Uncovers Sandbox Escapes Allowing Authenticated RCE

Fortinet Begins Patching Actively Exploited FortiCloud SSO Bypass as CISA Sets Jan. 30 Deadline

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

CISA Warns VMware vCenter Flaw Is Under Attack, Sets Federal Patch Deadline

Critical Telnetd Bug in GNU Inetutils Sees Real-World Attacks as Patch Ships

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog With Feb. 12 Remediation Deadline

Cisco Patches Actively Exploited RCE in Unified Communications and Webex Calling

Cisco Releases Fix for AsyncOS Zero-Day Exploited on Secure Email Appliances

Fortinet FortiSIEM Flaw Under Active Exploitation After Public Exploit Release

WordPress Modular DS Flaw Under Active Attack as Patch Ships to Block Admin Takeovers

Microsoft’s January Patch Tuesday Fixes 112 Flaws, Confirms DWM Zero-Day Exploited