Advisories
Vulnerabilities Found in Page Builder CK (CVE-2026-48908) and SP Page Builder (CVE-2026-56290)
Critical vulnerabilities have been found in two Joomla plugins, leading to maximum severity CVE-2026-56290 and CVE-2026-48908, both already added to CISA's KEV catalog.
Jul 8, 2026 - 5 Min Read
Critical Vulnerabilities in BeyondTrust Remote Support and Privileged Remote Access (CVE-2026-40138, CVE-2026-40139)
Two pre-authentication flaws CVE-2026-40138 and CVE-2026-40139 disclosed in BeyondTrust Remote Support and Privileged Remote Access let attackers bypass authentication and reach the appliance, including privileged accounts, when a specific authentication configuration is enabled.
Jul 7, 2026 - 2 Min Read
Multiple High-Severity Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway (CVE-2026-8451)
On June 30th, 2026, Citrix disclosed a high-severity vulnerability in its NetScaler ADC and NetScaler Gateway products. Tracked as CVE-2026-8451, the flaw lets an unauthenticated, remote attacker leak fragments of appliance memory from a NetScaler configured as a SAML identity provider, placing it in the same class of memory disclosure flaws collectively known as "CitrixBleed."
Jun 30, 2026 - 3 Min Read
Critical Vulnerability in Ubiquiti Network Application Under Active Exploitation (CVE-2026-34908, CVE-2026-34909, CVE-2026-34910)
Three CVEs released for Ubiquiti's UniFi OS allow attackers unauthenticated remote root level access
Jun 24, 2026 - 4 Min Read
Supply Chain Attack of Klue Market Intelligence Platform
A compromise of Klue's market intelligence platform resulted in an attacker accessing multiple Salesforce instances, affecting multiple downstream clients.
Jun 22, 2026 - 4 Min Read
"FortiBleed" Data Disclosure
A cyber espionage campaign dubbed “FortiBleed” has been uncovered by security researchers purportedly involving the compromise of over 73,000 Fortinet devices. The recovered dataset indicates that the attacker’s operation targeted FortiGate devices and related SSL VPN gateways.
Jun 17, 2026 - 3 Min Read
Critical Vulnerability in Content Editor Extension for Joomla (CVE-2026-48907)
An Remote Code Execution vulnerability was published that affects a well-known and widely used Joomla Extension "Joomla Content Editor" that is being exploited in the wild.
Jun 16, 2026 - 3 Min Read
Critical Authentication Bypass in SimpleHelp (CVE-2026-48558)
A critical SimpleHelp RMM remote authentication bypass was released June 12th which allows attackers to create privileged Technician accounts and grant control of SimpleHelp instance
Jun 16, 2026 - 4 Min Read
Critical Vulnerability in Oracle PeopleSoft Enterprise PeopleTools Under Active Exploitation (CVE-2026-35273)
On June 10th Oracle released a security advisory impacting the Environment Management component within Oracle’s PeopleSoft application. The vulnerability, now publicly tracked as CVE-2026-35273, has been reportedly actively exploited as early as May 27th 2026.
Jun 11, 2026 - 3 Min Read
Critical Vulnerabilities in Ivanti Sentry & EPMM (CVE-2026-6973, CVE-2026-10727, CVE-2026-10520, CVE-2026-10523)
Ivanti published two advisories covering 4 CVEs across their Endpoint Manager Mobile (EPMM) and Ivanti Sentry products that range from authentication bypass to remote code execution.
Jun 10, 2026 - 3 Min Read