JetBrains patched a critical TeamCity On-Premises vulnerability (CVE-2026-63077) that can be exploited without authentication to reach remote code execution. Learn the affected versions, update paths, and practical hardening steps.
Er is een zeer ernstige kwetsbaarheid gemeld in Fortinet FortiClient EMS: CVE-2026-35616 (CVSS 9.8). Het advies is om de beveiligingsupdate direct te installeren.
A critical cPanel WHM vulnerability, CVE-2026-41940, can allow unauthorized root-level access via session file manipulation. Install the vendor security updates as soon as possible.
The PAN-OS vulnerability CVE-2026-0257 is being actively exploited, allowing attackers to reach internal systems via VPN when certain configurations are enabled. Update defenses fast and verify your exposure.
A new Office update alert warns of multiple Microsoft Office vulnerabilities across Word, Excel, PowerPoint, and SharePoint. One SharePoint flaw is actively exploited, so installing updates fast is critical.
The NCSC reports severe WordPress Core vulnerabilities that have already been exploited. If you run WordPress, install the security updates as soon as possible.
The NCSC reports multiple critical vulnerabilities in Oracle Fusion Middleware components. Because they can be exploited remotely without authentication, organizations should install Oracle security updates immediately.
Rapid7 has published a Python PoC to test for CVE-2026-16232. This SmartConsole auth bypass lets attackers obtain an admin login token if the setup allows unauthenticated access.
A critical Ruflo MCP flaw (CVE-2026-59726) lets attackers run commands without authentication. The impact includes API key theft and poisoning of persistent AI memory.
CISA added a Cisco FMC zero-day to its KEV catalog after reports of active exploitation. The flaw involves static credentials that could let attackers access sensitive data.
