CVE: CVE-2026-11374 | CVSS 3.1: 9.0 (CRITICAL) | CWE: CWE-340 (Generation of Predictable Numbers or Identifiers) | Vendor: ManageEngine (Zoho Corp) | Product: ADSelfService Plus, … Read More
CVE: CVE-2026-56315, CVE-2025-71376, CVE-2025-71370, CVE-2025-71365, CVE-2025-71341 | CVSS 3.1: 9.8 (CVE-2026-56315) / 8.1 (4x) | CWE: CWE-693 | Vendor: picklescan | Product: picklescan | Affected … Read More
CVE: CVE-2026-56274 | CVSS 3.1: 9.9 (CRITICAL) | CWE: CWE-78 | Vendor: FlowiseAI | Product: Flowise | Affected versions: < 3.1.2 What Is the Vulnerability … Read More
CISA Known Exploited Vulnerability (KEV): Added to the CISA KEV Catalog on June 23, 2026. Action due June 26, 2026. BOD 26-04 3-day patch mandate … Read More
CISA Known Exploited Vulnerability (KEV): Added to the CISA KEV Catalog on June 23, 2026. Action due June 26, 2026. BOD 26-04 3-day patch mandate … Read More
Vulnerability Intelligence Report — June 24, 2026 Coverage: June 1–24, 2026 | Total CISA KEV additions (period): 20 | New KEVs: 4 (3x Ubiquiti UniFi … Read More
UPDATE — June 25, 2026: The FortiBleed campaign has been dramatically re-scoped. Over 70,000 Fortinet FortiGate firewalls have now been confirmed compromised — making this … Read More
What Happened Security researchers have identified a critical code execution vulnerability (CVE-2026-XXXXX, CVSS 9.8) in Microsoft AutoGen Studio, the open-source multi-agent AI framework maintained by … Read More
What Happened A critical heap-based buffer overflow vulnerability—dubbed PixelSmash—has been discovered in FFmpeg’s core video decoder pipeline. The flaw resides in the pixel format conversion … Read More
Vulnerability Intelligence Report — June 23, 2026 Coverage: June 1–23, 2026 | Total CISA KEV additions (period): 16 | New KEVs: 0 | KEV deadlines … Read More
