Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation
Ravie LakshmananApr 17, 2026Vulnerability / Enterprise Security A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active...
flaw
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover
Ravie LakshmananApr 15, 2026Web Security / Vulnerability A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management...
Microsoft: Third-Party Android Vulnerability Leaves Over 50M Users Exposed
Image: ChatGPT A critical Android software development kit (SDK) flaw has turned a utility tool into a malware bridge, gaining...
Attackers exploit critical Flowise flaw CVE-2025-59528 for remote code execution
Attackers exploit critical Flowise flaw CVE-2025-59528 for remote code execution Pierluigi Paganini April 07, 2026 Attackers are exploiting a critical...
U.S. CISA adds a flaw in Fortinet FortiClient EMS to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Fortinet FortiClient EMS to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 07, 2026...
Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed
Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to new findings...
Attackers Exploit RCE Flaw as 14,000 F5 BIG-IP APM Instances Remain Exposed
Attackers Exploit RCE Flaw as 14,000 F5 BIG-IP APM Instances Remain Exposed Pierluigi Paganini April 06, 2026 Over 14,000 F5...
CVE-2026-35616: Fortinet fixes actively exploited high-severity flaw
CVE-2026-35616: Fortinet fixes actively exploited high-severity flaw Pierluigi Paganini April 06, 2026 Fortinet issued emergency patches for a critical FortiClient...
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
Ravie LakshmananApr 05, 2026Vulnerability / API Security Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS...
U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 04, 2026 The...
U.S. CISA adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 01, 2026 The...
TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks
Ravie LakshmananMar 31, 2026Zero-Day / Vulnerability A high-severity security flaw in the TrueConf client video conferencing software has been exploited...
U.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 31, 2026 The...
Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution
Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution Pierluigi Paganini March 30, 2026 Attackers are exploiting a critical...
U.S. CISA adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 28, 2026...
