CVEs: CVE-2026-9780 through CVE-2026-9787, plus CVE-2026-7569 and CVE-2026-7570 | CVSS 3.1: 8.8 (HIGH) for all 8 CVEs | Vendor: Quest | Product: NetVault Backup What … Read More
Version: cURL 8.21.0 | Vulnerabilities Patched: 18 (record) | Oldest Flaw: CVE-2026-8932 (25 years, since curl 7.7, March 2001) | Severity Range: Low to Medium … Read More
CVE: CVE-2026-40079 | CVSS: 9.8 | Vendor: Cacti | Product: Cacti Network Monitoring What Is the Vulnerability CVE-2026-40079 is a command injection vulnerability (CWE-88) in … Read More
UPDATE — June 26, 2026: Active Exploitation Confirmed — Webshells Deployed. CISA and PTC have confirmed that attackers are actively exploiting CVE-2026-12569 to deploy webshells … Read More
Vulnerability Intelligence Report — June 26, 2026 Coverage: June 1–26, 2026 | Total CISA KEV additions (period): 22 | New KEVs: 2 (Cisco UCM, PTC … Read More
CVE: CVE-2026-13021 through CVE-2026-13030 (10 CVEs) | Highest CVSS 3.1: 9.6 (CRITICAL) — CVE-2026-13028 | Vendor: Google | Product: Chrome 149.0.7827.197 | Platforms: Windows, Mac, … Read More
UPDATE — June 25, 2026: CISA KEV Confirmed. CISA has added CVE-2026-20230 to the Known Exploited Vulnerabilities Catalog. Action due June 28, 2026 under BOD … Read More
Vulnerability Intelligence Report — June 25, 2026 Coverage: June 1–25, 2026 | Total CISA KEV additions (period): 20 | New KEVs: 0 | KEV deadline … Read More
CVE: CVE-2026-9733 | CVSS 3.1: 9.1 (CRITICAL) | CWE: CWE-340 (Generation of Predictable Numbers or Identifiers) | Vendor: Mojolicious | Product: Mojolicious::Plugin::Web::Auth::OAuth2 | Affected versions: … Read More
CVE: CVE-2026-12866 | CVSS 3.1: 9.8 (CRITICAL) | CWE: CWE-94 (Improper Control of Generation of Code — Code Injection) | Vendor: silentmatt | Product: expr-eval … Read More
