TTP Advisory: Iran Cavern C2 Framework | No CVE | Threat Actor: Cavern Manticore (Iran, MOIS-affiliated) | Overlaps: MuddyWater, Lyceum, OilRig | Targets: Israeli IT … Read More
CVE: CVE-2026-40138, CVE-2026-40139 | CVSS 3.1: 9.2 (Critical) each | CWE: CWE-287 (Improper Authentication) | Vendor: BeyondTrust | Product: Remote Support (RS) and Privileged Remote … Read More
CVE: CVE-2024-42009 | CVSS 3.1: 9.3 (Critical) | Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N | CWE: CWE-79 (Cross-Site Scripting) | Vendor: Roundcube | Product: Roundcube Webmail | Affected versions: … Read More
CVE: CVE-2026-20896 | CVSS 3.1: 9.8 (Critical) | Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CWE: CWE-1188 (Insecure Default) | Vendor: Gitea | Product: Gitea Docker Image | Affected … Read More
CVE: CVE-2026-53359 | CVSS 3.1: N/A (pending) | Vendor: Linux Kernel | Product: KVM (Kernel-based Virtual Machine) | Affected: Linux x86 KVM hypervisor — both … Read More
CVE: CVE-2026-48282 | CVSS 3.1: 10.0 (Critical) | Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | CWE: CWE-22 (Path Traversal) | Vendor: Adobe | Product: ColdFusion | Affected versions: 2025.9, … Read More
Vulnerability Intelligence Report — July 7, 2026 New CISA KEV: 0 | KEV calendar clear for 3rd day | Januscape: 16-year-old KVM guest-to-host VM escape … Read More
TTP Advisory: Opera GX Browser Flaw | No CVE | Severity: Critical (P1, $5,000 bug bounty) | Vendor: Opera | Product: Opera GX Browser | … Read More
CISA Known Exploited Vulnerability (KEV): CVE-2026-20262 added June 15 (deadline June 29 — now 7 days overdue). CVE-2026-20245 added June 9 (deadline June 23 — … Read More
Supply Chain Advisory: PolinRider Campaign | No CVE | Threat Actor: North Korean (Contagious Interview group) | Targets: npm, Packagist, Go modules, Chrome extensions | … Read More
