Skip to main content

Over 1,000 GitLab Servers Remain Exposed to Active Exploitation Weeks After Patch (CVE-2026-97229)

Scope: Self-managed GitLab Community Edition and Enterprise Edition, instances not yet upd

C3RB3R Ransomware Encrypting Synology NAS Devices on Outdated DSM Builds

Scope: Synology DSM on NAS devices, all unpatched builds across the 7.4, 7.3, 7.2.2, and 7

s2Member WordPress Plugin Code Injection Flaw Has Public Exploit Code (CVE-2026-86596)

Scope: s2Member WordPress plugin, all versions through 260927, fixed in 261017

Langflow Unauthenticated Authentication Bypass and Remote Code Execution (CVE-2026-93680 / CVE-2026-110186)

Scope: Langflow, versions 1.0.0 through 1.12.8, fixed in 1.13.0

“KeyDrift” Malware Stole Cisco SD-WAN Encryption Keys for Years Before Detection (CVE-2026-20127)

Scope: Cisco Catalyst SD-WAN Controller, Manager, and Validator (patched since February 20

Cisco Patches Actively Exploited ASA and FTD Firewall Crash Vulnerability (CVE-2026-76418)

Scope: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat

Attackers Chain Three Ivanti Connect Secure Flaws to Achieve Unauthenticated Root Access (CVE-2026-111357 / CVE-2026-118527)

Scope: Ivanti Connect Secure (ICS), versions prior to the latest patched release covering

Subscribe to Advisories