exploited

Everest Forms Vulnerability Exploited to Hack WordPress Sites

exploited, Vulnerabilities, vulnerability, WordPress /

Everest Forms Vulnerability Exploited to Hack WordPress Sites 2026-06-08 at 16:16 By Ionut Arghire The flaw allows attackers to execute arbitrary code remotely and has been exploited in the wild for two months. The post Everest Forms Vulnerability Exploited to Hack WordPress Sites appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Everest Forms Vulnerability Exploited to Hack WordPress Sites Read More »

SolarWinds Serv-U Vulnerability Exploited in the Wild

exploited, SolarWinds, Vulnerabilities, vulnerability /

SolarWinds Serv-U Vulnerability Exploited in the Wild 2026-06-08 at 13:09 By Ionut Arghire Unauthenticated attackers can exploit the flaw via specially crafted POST requests that crash the Serv-U service. The post SolarWinds Serv-U Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SolarWinds Serv-U Vulnerability Exploited in the Wild Read More »

Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026

Cisco, exploited, Featured, SD-WAN, Vulnerabilities, Zero-Day /

Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026 2026-06-05 at 09:23 By Eduard Kovacs The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet. The post Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026 appeared first on SecurityWeek. This article is an excerpt from

Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026 Read More »

Mirasvit Vulnerability Exploited to Execute Code on Magento Servers

exploited, magento, Vulnerabilities, vulnerability /

Mirasvit Vulnerability Exploited to Execute Code on Magento Servers 2026-06-04 at 16:06 By Ionut Arghire A flaw in the Full Page Cache Warmer extension can be exploited without authentication via serialized PHP object payloads. The post Mirasvit Vulnerability Exploited to Execute Code on Magento Servers appeared first on SecurityWeek. This article is an excerpt from

Mirasvit Vulnerability Exploited to Execute Code on Magento Servers Read More »

Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs

exploited, plugin vulnerability, Vulnerabilities, WordPress /

Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs 2026-06-03 at 20:19 By Ionut Arghire Threat actors are exploiting vulnerable Kirki and Burst Statistics deployments to elevate privileges and take over websites. The post Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs Read More »

Organizations Warned of Exploited Linux Kernel Vulnerability

CISA KEV, container, exploited, Linux, Vulnerabilities /

Organizations Warned of Exploited Linux Kernel Vulnerability 2026-06-03 at 14:56 By Ionut Arghire An improper authentication bug allows attackers to escalate their privileges and escape containers. The post Organizations Warned of Exploited Linux Kernel Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Organizations Warned of Exploited Linux Kernel Vulnerability Read More »

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities

Android, exploited, Mobile & Wireless, mobile security, Vulnerabilities, Zero-Day /

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities 2026-06-02 at 18:01 By Eduard Kovacs Google says the Android vulnerability CVE-2025-48595 has been exploited in limited, targeted attacks. The post Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities Read More »

Oracle WebLogic Vulnerability Exploited in the Wild

CISA KEV, exploited, Oracle, Oracle WebLogic, Vulnerabilities, vulnerability, WebLogic /

Oracle WebLogic Vulnerability Exploited in the Wild 2026-06-02 at 15:46 By Eduard Kovacs The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers. The post Oracle WebLogic Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Oracle WebLogic Vulnerability Exploited in the Wild Read More »

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day

CISA KEV, cPanel, exploited, LiteSpeed, plugin, Vulnerabilities, Zero-Day /

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day 2026-05-27 at 09:56 By Ionut Arghire Resolved last week, the vulnerability was exploited in the wild as a zero-day to execute scripts with root privileges. The post CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day appeared first on SecurityWeek. This article is an

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day Read More »

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment

exploited, KnowledgeDeliver, Vulnerabilities, vulnerability, Zero-Day /

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment 2026-05-26 at 17:32 By Ionut Arghire Hardcoded machineKey values in a configuration file enabled ViewState deserialization attacks leading to remote code execution. The post Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment Read More »

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites

CMS, exploited, Ghost, Vulnerabilities, vulnerability /

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites 2026-05-25 at 16:59 By Eduard Kovacs Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack. The post Ghost CMS Vulnerability Exploited to Hack Over 700 Websites appeared first on SecurityWeek. This article is an excerpt

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites Read More »

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure

Drupal, exploited, Featured, Vulnerabilities /

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure 2026-05-22 at 21:05 By Eduard Kovacs Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites. The post Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure appeared first on SecurityWeek. This article is an

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure Read More »

TrendAI Patches Apex One Zero-Day Exploited in the Wild

exploited, Featured, Trend Micro, TrendAI, Vulnerabilities, vulnerability, Zero-Day /

TrendAI Patches Apex One Zero-Day Exploited in the Wild 2026-05-22 at 11:53 By Eduard Kovacs CVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One. The post TrendAI Patches Apex One Zero-Day Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

TrendAI Patches Apex One Zero-Day Exploited in the Wild Read More »

Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days

exploited, Microsoft, Microsoft Defender, RedSun, UnDefend, Vulnerabilities, Zero-Day /

Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days 2026-05-21 at 13:14 By Ionut Arghire The bugs could be exploited to elevate privileges to System or create a denial-of-service (DoS) condition. The post Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days Read More »

Exploitation of Critical NGINX Vulnerability Begins

exploited, Nginx, Vulnerabilities, vulnerability /

Exploitation of Critical NGINX Vulnerability Begins 2026-05-18 at 10:34 By Ionut Arghire The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled. The post Exploitation of Critical NGINX Vulnerability Begins appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Exploitation of Critical NGINX Vulnerability Begins Read More »

Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild

email security, Exchange, exploited, Microsoft Exchange, Vulnerabilities, Zero-Day /

Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild 2026-05-15 at 15:32 By Eduard Kovacs Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions. The post Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt

Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild Read More »

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026

Cisco, exploited, Featured, SD-WAN, UAT-8616, Vulnerabilities, Zero-Day /

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026 2026-05-15 at 10:16 By Eduard Kovacs The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616. The post Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026 appeared first on SecurityWeek. This article is an

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026 Read More »

Hackers Targeted PraisonAI Vulnerability Hours After Disclosure

AI, Artificial Intelligence, exploited, PraisonAI, Vulnerabilities, vulnerability /

Hackers Targeted PraisonAI Vulnerability Hours After Disclosure 2026-05-14 at 12:48 By Ionut Arghire The first exploitation attempts were observed less than four hours after the authentication bypass was publicly disclosed. The post Hackers Targeted PraisonAI Vulnerability Hours After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Targeted PraisonAI Vulnerability Hours After Disclosure Read More »

Scroll to Top