Vulnerabilities

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws

Aveva, ICS, ICS/OT, patches, Schneider Electric, Siemens, Vulnerabilities /

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws 2026-09-09 at 13:49 By Ionut Arghire AVEVA and Rockwell Automation also released patches for vulnerabilities affecting industrial control system products. The post ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws Read More »

Ivanti Patches Critical Flaws Across Enterprise Security Products

Ivanti, Network Security, Vulnerabilities /

Ivanti Patches Critical Flaws Across Enterprise Security Products 2026-09-09 at 13:28 By Ionut Arghire Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for authentication bypass flaws. The post Ivanti Patches Critical Flaws Across Enterprise Security Products appeared first on SecurityWeek. This article is an excerpt […]

Ivanti Patches Critical Flaws Across Enterprise Security Products Read More »

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days

Featured, Microsoft, Patch Tuesady, Vulnerabilities /

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days 2026-09-08 at 22:20 By Ionut Arghire The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities. The post Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days Read More »

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day

Adobe, CVE-2026-75650, Patch Tuesady, Vulnerabilities /

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day 2026-09-08 at 21:37 By Ionut Arghire Tracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code. The post Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day Read More »

MikroTik Patches Critical Flaws Chained to Hack Routers

mikrotik, Network Security, Vulnerabilities /

MikroTik Patches Critical Flaws Chained to Hack Routers 2026-09-08 at 14:15 By Ionut Arghire Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. The post MikroTik Patches Critical Flaws Chained to Hack Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

MikroTik Patches Critical Flaws Chained to Hack Routers Read More »

N-able Patches Critical Zero-Day in N-central

CVE-2026-86218, Featured, N-central, Vulnerabilities, Zero-Day /

N-able Patches Critical Zero-Day in N-central 2026-09-08 at 13:37 By Ionut Arghire Administrators are advised to check their deployments for newly created user accounts they don’t recognize. The post N-able Patches Critical Zero-Day in N-central appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

N-able Patches Critical Zero-Day in N-central Read More »

Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits

CrowdStrike, exploit, NVIDIA, Vulnerabilities, Zero-Day /

Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits 2026-09-07 at 15:15 By Ionut Arghire The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges. The post Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits Read More »

Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Featured, Vulnerabilities, vulnerability /

Adobe Commerce Zero-Day Exploited to Backdoor Online Stores 2026-09-07 at 14:58 By Ionut Arghire The StyleSmuggler zero-day allows attackers to execute code and deploy a stealthy backdoor on Adobe Commerce and Magento stores. The post Adobe Commerce Zero-Day Exploited to Backdoor Online Stores appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Adobe Commerce Zero-Day Exploited to Backdoor Online Stores Read More »

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

Application Security, Vulnerabilities, WordPress /

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites 2026-09-05 at 16:00 By Ionut Arghire Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions. The post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek. This article […]

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites Read More »

Sangoma Switchvox Vulnerabilities Exploited in the Wild

Vulnerabilities /

Sangoma Switchvox Vulnerabilities Exploited in the Wild 2026-09-04 at 16:23 By Ionut Arghire Tracked as CVE-2026-9586, the unauthenticated SQL injection flaw can be exploited remotely for arbitrary code execution. The post Sangoma Switchvox Vulnerabilities Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Sangoma Switchvox Vulnerabilities Exploited in the Wild Read More »

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

CVE-2026-6471, Featured, PostgreSQL, Vulnerabilities /

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover 2026-09-04 at 15:06 By Ionut Arghire Dubbed PostGREShell, CVE-2026-6471 turns low-level replication access into code execution, permanent superuser privileges and a persistent database backdoor. The post 12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover Read More »

VMware Workstation and Fusion Updates Patch Critical Vulnerability

CVE-2026-59346, VMWare, Vulnerabilities /

VMware Workstation and Fusion Updates Patch Critical Vulnerability 2026-09-04 at 14:42 By Ionut Arghire The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system. The post VMware Workstation and Fusion Updates Patch Critical Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

VMware Workstation and Fusion Updates Patch Critical Vulnerability Read More »

Google Patches 6th Chrome Zero-Day of 2026

Chrome, Vulnerabilities, Zero-Day /

Google Patches 6th Chrome Zero-Day of 2026 2026-09-04 at 14:31 By Ionut Arghire Google’s Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8 engine. The post Google Patches 6th Chrome Zero-Day of 2026 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Patches 6th Chrome Zero-Day of 2026 Read More »

Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability

CVE-2026-19949, Vulnerabilities, vulnerability, WordPress /

Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability 2026-09-03 at 13:40 By Ionut Arghire The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution. The post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability Read More »

Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities

Cisco, CVE-2026-20354, CVE-2026-20355, Network Security, Vulnerabilities /

Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities 2026-09-03 at 13:30 By Ionut Arghire Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote code execution and authentication bypass. The post Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities appeared […]

Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities Read More »

Exploit Published for Fresh Cleo Harmony Vulnerability

Cleo, PoC exploit, Vulnerabilities, vulnerability /

Exploit Published for Fresh Cleo Harmony Vulnerability 2026-09-02 at 15:18 By Ionut Arghire The security defect allows remote attackers to bypass authentication through argument bearer manipulation. The post Exploit Published for Fresh Cleo Harmony Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Exploit Published for Fresh Cleo Harmony Vulnerability Read More »

Chrome and Firefox Updates Patch Dozens of Vulnerabilities

Chrome, Firefox, Mozilla, patches, Vulnerabilities, vulnerability /

Chrome and Firefox Updates Patch Dozens of Vulnerabilities 2026-09-02 at 12:12 By Ionut Arghire The browser refreshes fix multiple use-after-free, sandbox escape, and privilege escalation bugs. The post Chrome and Firefox Updates Patch Dozens of Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome and Firefox Updates Patch Dozens of Vulnerabilities Read More »

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks

exploited, Featured, SMA1000, SonicWall, Vulnerabilities, vulnerability, Zero-Day /

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks 2026-09-02 at 08:04 By Eduard Kovacs The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution. The post SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks Read More »

Scroll to Top