Note: This advisory covers 5 newly disclosed LiteLLM CVEs. For the CISA KEV CVE-2026-42271 (command injection, due TODAY June 22), see our dedicated CVE-2026-42271 advisory. … Read More
Vulnerability Intelligence Report — June 22, 2026 Coverage: June 1–22, 2026 | Total CISA KEV additions (period): 16 | New KEVs: 0 | KEV deadline … Read More
What Is CVE-2026-11551? CVE-2026-11551 is a critical authentication bypass and privilege escalation vulnerability in the Branda WordPress plugin, carrying a CVSS score of 9.8. The … Read More
What Happened A newly identified botnet tracked as AryStinger has been observed actively compromising thousands of D-Link routers across the globe. The campaign exploits known … Read More
What Happened Microsoft Threat Intelligence has attributed a sophisticated supply chain attack targeting the Mastra AI framework to state-sponsored actors operating out of the Democratic … Read More
What Happened Security researchers have identified a new ransomware variant dubbed Prinz Eugen that appends the .prinzeugen extension to encrypted files. First observed in the … Read More
Vulnerability Intelligence Report — June 21, 2026 (Sunday Edition) Coverage: June 1–21, 2026 | Total CISA KEV additions (period): 16 | New KEVs: 0 | … Read More
Overview pgAdmin 4, the most widely used open-source administration and development platform for PostgreSQL, has disclosed multiple critical vulnerabilities in a June 2026 security advisory. … Read More
Actively Exploited â Information Disclosure CVE-2026-4020 is an unauthenticated information disclosure vulnerability in the Gravity SMTP WordPress plugin, actively installed on over 100,000 sites. CVSS … Read More
What Happened The Icarus threat actor group has significantly expanded its exploitation of the Klue OAuth token breach, pivoting from initial reconnaissance to full-scale Salesforce … Read More
