7 articles

# CVSS

─── TAG ───

TechnologyJul 10, 2026·3 min read

Progress Urges ShareFile Admins to Shut Down Servers Over Credible Security Threat Cybersecurity

In April 2026, watchTowr Labs disclosed two chainable vulnerabilities in Storage Zone Controller: CVE-2026-2699, an authentication bypass with a CVSS score...

Vulnerabilities & ExploitsJul 7, 2026·2 min read

Critical Gitea Flaw Under Active Exploitation, Researchers Warn Vulnerability (CVE-2026-20896)

Specific to Gitea’s official Docker images, the critical-severity security defect is tracked as CVE-2026-20896 (CVSS score of 9.8) and can be exploited with...

Vulnerabilities & ExploitsJul 1, 2026·4 min read

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability

"Credentials accessible from a developer or administrator workstation may provide entry into production infrastructure, build pipelines, source code...

Vulnerabilities & ExploitsJun 24, 2026·3 min read

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability

Cisco Unified Communications Manager has a serious vulnerability, tracked as CVE-2026-20230 (CVSS score of 8.6), that attackers are already exploiting. The...

Vulnerabilities & ExploitsJun 20, 2026·4 min read

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys Vulnerability (CVE-2026-4020)

The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers to...

Vulnerabilities & ExploitsJun 19, 2026·3 min read

Apple patches Beats Studio Buds flaw that could turn earbuds into a wiretap Vulnerability

The security update fixes CVE-2025-20701, a vulnerability discovered by Dennis Heinze and Frieder Steinmetz of German cybersecurity firm ERNW. The issue is...

Vulnerabilities & ExploitsJun 15, 2026·5 min read

Palo Alto Warns of Exploitation of VPN Bypass Exploits (CVE-2026-0257) in PAN-OS Flaw Vulnerability

"Only a small portion of the probed devices actually established VPN sessions, resulting in gateway-connected events." The company has also released...