Gitea Self-Hosted Git Service Unauthenticated RCE Actively Exploited to Deploy Cryptocurrency Miners (CVE-2026-60004)

Scope: Gitea Versions 1.17 through 1.27.0 (All Versions Prior to 1.27.1)

Severity: Red

Read More

MikroTik RouterOS "MikroTrick" Authentication Bypass Chain Seizes Devices Without Credentials (CVE-2026-67277 / CVE-2026-86060)

Scope: MikroTik RouterOS (All Versions Affected by Both CVEs, Prior to Latest Stable Release)

Severity: Red

Read More

ConnectWise ScreenConnect Authentication Bypass Under Active Exploitation Grants Full Remote Control of Managed Endpoints (CVE-2026-77924)

Scope: ConnectWise ScreenConnect (All Versions Prior to Latest Patched Release)

Severity: Red

Read More

Google Chrome V8 Type Confusion Zero-Day Under Active Exploitation Added to CISA KEV (CVE-2026-85046)

Scope: Google Chrome Prior to Version 152.0.7977.82 and All Chromium-Based Browsers Including Microsoft Edge, Brave, and Opera

Severity: High

Read More

Windows Update Stack and ALPC Actively Exploited Zero-Days from Record September 2026 Patch Tuesday (CVE-2026-81963 / CVE-2026-85880)

Scope: Windows 10, Windows 11, Windows Server 2019, 2022, and 2025 (All Supported Versions)

Severity: Red

Read More

14,530 Dahua CCTV Cameras and NVRs Compromised in Active Campaign Using Authentication Bypass Flaws

Scope: Dahua IP Cameras, NVRs, and DVRs (All Models Running Unpatched Firmware)

Severity: Red

Read More