Daily briefing
Briefing archive
August 2026
- Aug 9, 2026August 9 Quiet Day: IoT Command Injection Flaws and Brazilian Ransomware Wave Dominate the Picture
- Aug 8, 2026MSI Router Hit by Eight Critical Command Injection CVEs; WordPress AI Plugin Opens Admin Backdoor
- Aug 7, 2026Ten Critical CVEs Under Active Exploitation: SonicWall, WordPress, SharePoint, and More Under Fire
- Aug 6, 202610 Active Exploits, 1 Weaponized in a Day: Critical Alert Across WordPress, SharePoint, SonicWall, and More
- Aug 5, 2026Cisco SD-WAN, MarkLogic, and PraisonAI Lead a Batch of Critical CVEs on a Calm Exploitation Day
- Aug 4, 2026Quiet Day Masks 10 Critical CVEs: RCE, Auth Bypass, and Stack Overflows in Focus
- Aug 3, 2026Adobe Campaign Classic and WAPT Server Hit by Multiple CVSS 10.0 Vulnerabilities
- Aug 2, 2026Bouncy Castle Mass Patch Day: Six Critical CVEs Drop Alongside SQL Injection and Auth Bypass Flaws
- Aug 1, 2026WordPress Auth Bypasses and FreeRDP Heap Flaws Top a Calm Vulnerability Day
July 2026
- Jul 31, 2026Calm Day Hides Critical Flaws: Hard-coded Keys, File Uploads, and Code Injection Dominate July 31
- Jul 30, 202632 Critical CVEs, No Active Exploitation: Azure Cosmos DB and IBM Products Lead a Heavy Patch Day
- Jul 29, 2026Cisco FMC Under Active Exploit, Joomla Gridbox Cluster Hits Critical Mass with Four CVEs
- Jul 28, 2026Quiet Day Hides Critical Vulnerabilities: IBM WebSphere, Apache Axis2, and Joomla Top the List
- Jul 27, 2026CVE-2026-16812: VeloCloud Orchestrator Under Active Exploitation as Critical Flaws Pile Up Across Enterprise and WordPress Stacks
- Jul 26, 2026Quiet Vulnerability Day as Brazil Faces Ransomware Wave From Multiple Groups
- Jul 25, 2026CVSS 10.0 in SiYuan and Auth Bypass in OpenRemote Lead a Calm Day for New Exploits
- Jul 24, 2026Three CVSS 10.0 Microsoft Cloud Flaws Lead a Calm but Notable Patch Day
- Jul 23, 2026VulnCheck Flags Fastjson RCE in the Wild as Wave of CVSS 10 Flaws Hits Azure, Exchange, and Dev Tools
- Jul 22, 2026Check Point SmartConsole Auth Bypass Under Active Exploitation; Oracle Fusion Middleware Hit with Multiple Critical Flaws
- Jul 21, 2026Oracle Fusion Middleware Flooded With CVSS 10.0 Flaws in Quiet July Patch Wave
- Jul 20, 2026Calm CVE Day Masks 10 Critical Flaws Across Joomla, xrdp, and Supply Chain
- Jul 19, 2026Calm CVE Day Masks Heavy Ransomware Pressure on Brazil
- Jul 18, 2026VMware Avi Load Balancer and Open-Source Stacks Drive a Quiet but Patch-Heavy Friday
- Jul 17, 2026WordPress REST API Flaw Weaponized Same-Day, Five Langflow RCEs Drop Simultaneously
- Jul 16, 2026Jupyter and WordPress Flaws Dominate a Calm but CVE-Heavy Day
- Jul 15, 2026Ten Critical CVEs Disclosed on a Calm Day: Open-Source Tools Dominate the Risk Landscape
- Jul 14, 2026CRITICAL: Four CVEs Under Active Exploitation — SMA1000 SSRF, AD FS Privilege Escalation, and SharePoint Auth Bypass Lead the Charge
- Jul 13, 2026WordPress Plugin Wave: Ten Critical CVEs Published, No Active Exploitation Detected
- Jul 12, 2026Quiet CVE Day Masks Active Ransomware Wave Targeting Brazil
- Jul 11, 2026Quiet Day Hides Real Teeth: Critical RCE in PraisonAI and Joomla Extensions Demand Attention
- Jul 10, 2026Quiet Day Masks Critical Risks: Authentication Bypasses and Injection Flaws Dominate New CVEs
- Jul 9, 2026VulnCheck Flags Active Exploitation of Critical Joomla RCE Before CISA; 29 Critical CVEs Published
- Jul 8, 2026WordPress and CoreWCF Under Pressure: Active Exploitation Detected on July 8, 2026
- Jul 7, 20269Router OS Injection Under Active Exploitation as 10 Critical CVEs Surface on July 7
- Jul 6, 2026CVSS 10.0 Dual Zero-Days Hit ColdFusion and crawl4ai as Apache Camel Flooded with Critical Flaws
- Jul 5, 2026cve-search Critical Flaw Leads July 5 Roundup Alongside Multiple PoC-Exposed Vulnerabilities
- Jul 4, 2026July 4th: Public Exploits Flood Hosting Panels, Pickle Security Tools, and Open-Source E-Commerce
- Jul 3, 2026Gitea Takes Triple Hit as Critical Auth Bypass, SSRF, and Artifact Flaws Drop Simultaneously
- Jul 2, 2026Triple CVSS 10.0 and Seven More Criticals Flood July 2: Build Services, UniFi, WordPress, and Microsoft Cloud All Hit
- Jul 1, 2026368 New CVEs on July 1: Perfect-10 Hoppscotch Flaw, WordPress Admin Takeover, and Four Chrome Sandbox Escapes Dominate
June 2026
- Jun 30, 2026Massive Critical Surge: ColdFusion, Storage Concentrator, and Langflow All Hit With CVSS 10 Flaws on June 30
- Jun 29, 2026Unauthenticated RCE in Joomla Extension Leads Monday's Batch of Six Critical CVEs
- Jun 28, 2026Five Tenda Router Buffer Overflows Lead a Day of 47 New CVEs, All with Public Exploits
- Jun 27, 2026Ten KEV-Confirmed Vulnerabilities Dominate the Spotlight: Joomla, PeopleSoft, Splunk, and More Under Active Exploitation
- Jun 26, 202610 Actively Exploited CVEs Dominate: Joomla RCE, Splunk File Write, and PeopleSoft Takeover Lead Critical Wave
- Jun 25, 2026Three CVSS 10.0 Flaws Lead a Heavy Day: Apache Kvrocks, Flowise, and WordPress Under Fire
- Jun 24, 2026Ten KEV Vulnerabilities in Active Exploitation Demand Immediate Attention Across Enterprise and Consumer Stacks
- Jun 23, 2026FOSSBilling Auth Bypass and Router Hardcoded Keys Headline 9 Critical CVEs on June 23