Vulnerability Intelligence Report — June 20, 2026
Vulnerability Intelligence Report — June 20, 2026 (Saturday Edition) Coverage: June 1–20, 2026 | Total CISA KEV additions (period): 16 | New KEVs: 0 | … Read More
CVE-2026-20253: Splunk Enterprise Missing Authentication Vulnerability (CISA KEV)
CISA Known Exploited Vulnerability (KEV): Added to the CISA KEV Catalog on June 18, 2026. Action due Sunday, June 21, 2026. BOD 26-04 3-day patch … Read More
ShapedPlugin WordPress Update Flow Compromised in Supply-Chain Attack
What Happened On or around June 18, 2026, the update mechanism for the popular ShapedPlugin family of WordPress plugins was compromised in a supply-chain attack. … Read More
Gentlemen Ransomware Deploys Multiple EDR Killers to Disable Endpoint Defenses
What Happened A newly observed variant of the Gentlemen ransomware family has begun deploying multiple Endpoint Detection and Response (EDR) killer utilities in a coordinated … Read More
Vulnerability Intelligence Report — June 19, 2026
Vulnerability Intelligence Report — June 19, 2026 Coverage: June 1–19, 2026 | Total CISA KEV additions (period): 16 | New KEVs: 1 (Splunk) | KEV … Read More
F5 NGINX Out-of-Band Critical Security Patches Released
F5 has released out-of-band critical security patches for NGINX addressing two critical RCE/DoS vulnerabilities (CVE-2026-42530, CVE-2026-42055) in HTTP/3 and proxy/gRPC modules, plus two high-severity NGINX Gateway Fabric flaws. NGINX powers ~33% of all websites — patch immediately.
FortiBleed: Fortinet VPN Credentials Exposed for 73,000 Devices
What Happened On June 17, 2026, security researchers disclosed a massive credential leak affecting Fortinet VPN devices, dubbed “FortiBleed.” A publicly exposed database containing VPN … Read More
Oracle July 2026 Critical Patch Update: 5 CRITICAL and 12+ HIGH Severity Vulnerabilities Across WebLogic, PeopleSoft, Identity Manager, and WebCenter
Date: July 15, 2026 | TLP: CLEAR | Severity: CRITICAL Overview Oracle’s July 2026 Critical Patch Update (CPU) addresses 5 CRITICAL (CVSS ≥ 9.0) and … Read More
Vulnerability Intelligence Report — June 18, 2026
Vulnerability Intelligence Report — June 18, 2026 Coverage: June 1–18, 2026 | Total CISA KEV additions (period): 15 | New KEVs: 0 | KEV deadline … Read More
CVE-2026-6933: Premmerce Dev Tools WordPress Plugin Remote Code Execution Vulnerability (CVSS 8.8)
High Severity Vulnerability — CVSS 8.8 CVE-2026-6933 is a high-severity missing authorization vulnerability in the Premmerce Dev Tools WordPress plugin leading to unauthenticated remote code … Read More