A public exploit has been released for a pre-authentication remote code execution (RCE) vulnerability in vBulletin. Unauthenticated attackers can now execute arbitrary PHP code on vulnerable forums,.
A critical server-side request forgery (SSRF) vulnerability (CVE-2026-20230) in Cisco Unified Communications Manager is being actively exploited to deploy webshells and achieve root access. Patches.
Unauthenticated attackers are actively exploiting a high-severity authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks’ GlobalProtect VPN. CISA has added the flaw to its KEV.
A widespread malware campaign dubbed ‘Atomic Arch’ has compromised over 1,500 packages within the Arch Linux AUR, distributing a rootkit and credential stealer. The incident highlights risks of.
