Vulnerabilities and CVEs

14:00 Vulnerability

Guangzhou Juan IoT Technology EseeCloud

CISA

14:00 Exploited

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-21589CISA

13:40 Patch

USN-8883-2: Go vulnerability

Ubuntu Security

13:30 Vulnerability

Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool

CVE-2026-35029CVE-2026-59823Infosecurity Magazine

12:58 Exploited

Cisco Secure Email & PAN-OS Zero-Days Exploited

CVE-2026-76519SOCRadar

12:43 Exploited

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

CVE-2026-0322CVE-2026-76519Help Net Security

12:34 Vulnerability

SOCRadar Splunk Integration: New MSSP and Vulnerability Apps

SOCRadar

11:38 Vulnerability

2026-017: Critical Vulnerability in Cisco Secure Email Gateway

CERT-EU

11:27 Patch

Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise

CVE-2026-76519Security Affairs

11:10 Patch

Microsoft fixes bug causing Windows black screens, Explorer crashes

BleepingComputer

09:43 Vulnerability

VestaCP root RCE (VESTACP-2026-001)

Full Disclosure

09:43 Vulnerability

[SYSS-2026-080]: dcm4che - Path Traversal (CWE-22)

Full Disclosure

09:43 Vulnerability

[SYSS-2026-079]: dcm4che - Path Traversal (CWE-22)

Full Disclosure

09:43 Vulnerability

[SYSS-2026-078]: dcm4che - Path Traversal (CWE-22)

Full Disclosure

09:43 Vulnerability

[SYSS-2026-077]: dcm4che - Path Traversal (CWE-22)

Full Disclosure

09:42 Vulnerability

[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)

Full Disclosure

09:42 Vulnerability

[0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1)

Full Disclosure

09:42 Vulnerability

[0day-rubbish] SmartBear Collaborator Server 15.1.15101 authenticated DOORS/Simulink review-file upload zip-slip to anonymous webroot Groovy Server Page execution as uid 1001 (7.5)

Full Disclosure

09:42 Vulnerability

[0day-rubbish] PacsOne Server 7.3.9 authenticated DICOMweb STOW-RS SOP Instance UID path traversal to www-data code execution on a PACS host (7.2)

Full Disclosure

09:42 Vulnerability

[0day-rubbish] Maian Pal 2.1 product image upload with no extension allow-list to PHP webshell and www-data uid 33 code execution (7.2, PR:H)

Full Disclosure