First AI-Generated Zero-Day Exploit – 2FA Bypass in Open-Source Web Admin Tool

Scope: Open-Source Web-Based System Administration Tool (Vendor Unspecified)

Severity: High

Read More

LiteLLM Pre-Authentication SQL Injection – Added to CISA KEV (CVE-2026-42208)

Scope: LiteLLM Proxy Versions 1.81.16 – 1.83.6

Severity: Red

Read More

MetInfo CMS Unauthenticated PHP Code Injection Under Active Exploitation (CVE-2026-29014)

Scope: MetInfo CMS Versions 7.9, 8.0, and 8.1

Severity:  Red

Read More

DAEMON Tools Supply Chain Attack – Official Installers Trojanized Since April 8, 2026

Scope: DAEMON Tools Lite (Versions 12.5.0.2421 – 12.5.0.2434)

Severity: Red

Read More

Quasar Linux (QLNX) Implant Targeting Developer and DevOps Environments

Scope: Linux Developer Workstations, DevOps Infrastructure (npm, PyPI, GitHub, AWS, Docker, Kubernetes)

Severity: Red

Read More

Apache ActiveMQ Remote Code Execution via Improper Input Validation (CVE-2026-34197)

Scope: Apache ActiveMQ

Severity: Red

Read More