VMware vCenter CVE-2026-59310 Under Active Exploitation with 361 Victims Across 47 Countries

Scope: VMware vCenter Server All Versions Prior to VMSA-2026-0006.1 Patched Releases

Severity: Red

Read More

Microsoft SharePoint Server Deserialization Flaw Now Actively Exploited in Ransomware Campaigns (CVE-2026-45659)

Scope: Microsoft SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016 (On-Premises Only)

Severity: Red

Read More

N-able N-central Authentication Bypass Exploited to Compromise Managed Endpoints via Cloudflare Tunnels (CVE-2026-18577)

Scope: N-able N-central All Versions Prior to 2026.3.1.7 (Hosted and On-Premises)

Severity: Red

Read More

Cisco ClamAV ZIP Parser Denial of Service Vulnerabilities with Public Exploits (CVE-2026-20337 / CVE-2026-20338)

Scope: Cisco Secure Endpoint Connector for Windows, Mac, and Linux (ClamAV Versions Prior to 1.4.4 and 1.0.9)

Severity: High

Read More

Oracle Database "khunt" Post-Exploitation Toolkit Deployed via SQL Injection Without Writing Files to Disk

Scope: Oracle Database (Internet-Facing Web Applications Using JDBC Connections with Elevated Privileges)

Severity: Red

Read More

Windows Notepad App Remote Code Execution via Crafted Markdown File (CVE-2026-20841)

Scope: Windows Notepad App (Microsoft Store Version, Build 11.2510 and Earlier) on Windows 10 and Windows 11

Severity: High

Read More