N-able N-central Authentication Bypass Exploited to Compromise Managed Endpoints via Cloudflare Tunnels (CVE-2026-18577)

Scope: N-able N-central All Versions Prior to 2026.3.1.7 (Hosted and On-Premises)

Severity: Red

Read More

Oracle Database "khunt" Post-Exploitation Toolkit Deployed via SQL Injection Without Writing Files to Disk

Scope: Oracle Database (Internet-Facing Web Applications Using JDBC Connections with Elevated Privileges)

Severity: Red

Read More

Cisco August 2026 Security Bundle Patches Critical IOS XE and SD-WAN Vulnerabilities (CVE-2026-20303 and Others)

Scope: Cisco Catalyst SD-WAN Software, Cisco IOS XE Software, Cisco IOS Software, Cisco Integrated Management Controller

Severity:  Red

Read More

Windows Notepad App Remote Code Execution via Crafted Markdown File (CVE-2026-20841)

Scope: Windows Notepad App (Microsoft Store Version, Build 11.2510 and Earlier) on Windows 10 and Windows 11

Severity: High

Read More

IBM WebSphere Application Server Unauthenticated SSRF via SIP Container Enables Internal Network Compromise (CVE-2026-14529)

Scope: IBM WebSphere Application Server Traditional 8.5 and 9.0 / WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.8 (with SIP Container Feature Enabled)

Severity: Red

Read More

GitLab July 2026 Security Release Patches 13 Vulnerabilities Including Unauthenticated DoS, CI/CD Tampering, and AI Prompt Injection (CVE-2026-15975 and Others)

Scope: GitLab Community Edition and Enterprise Edition Versions 11.8 through 19.2.0 (Self-Managed Deployments Only)

Severity: High

Read More