Breaking
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 Hackers Hide Credit Card Stealer in Pixel-Sized SVG Images Targeting Magento Stores Microsoft Suspends Developer Accounts for High-Profile Open Source Projects European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Ransomware Attacks Surge in 2026: Healthcare and Finance Most Targeted Google Chrome Zero-Day Vulnerability Actively Exploited – Update Immediately Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 Hackers Hide Credit Card Stealer in Pixel-Sized SVG Images Targeting Magento Stores Microsoft Suspends Developer Accounts for High-Profile Open Source Projects European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Ransomware Attacks Surge in 2026: Healthcare and Finance Most Targeted Google Chrome Zero-Day Vulnerability Actively Exploited – Update Immediately
Latest Threat Intel Zero-Days Data Breaches Analysis
Live threat feed June 9, 2026 | 10:58 UTC
2032 CVEs This Month
7 Actively Exploited
0 Ransomware Activity
25 Breaches YTD
Threat Investigation Portal
Investigate an IOC in the live graph workspace.
Investigate IOC
Over 30 Red Hat npm Packages Compromised to Distribute New Credential-Stealing Malware Variant
Cloud & Identity Security | Exclusive
Over 30 Red Hat npm Packages Compromised to Distribute...
Thirumala Rao Padilam Thirumala Rao Padilam June 2, 2026
DriveSurge Threat Actor Uses ClickFix and FakeUpdate Attacks Across Thousands of Compromised Sites
Threat Intelligence
DriveSurge Threat Actor Uses ClickFix and FakeUpdate Attacks...
Dashlane Reports Brute-Force Attack Affecting Encrypted Vaults of Under 20 Users
Vulnerabilities
Dashlane Reports Brute-Force Attack Affecting Encrypted Vaults of...
Latest Threats
View all ->
Vulnerability Watch

Top 10 CVEs This Week

Prioritized using CISA KEV, EPSS, CVSS, and recency.

Full watchlist ->
CVE-2026-50751 KEV CVSS 9.3 EPSS 0.0001

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Known exploited vulnerability affecting Check Point Security Gateway with active defender relevance.

CVE-2023-54352 CVSS 9.8 EPSS 0.0019

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seotheme/mar.php to execute system commands and upload additional files for persistent access.

Critical severity issue in affected software published this week.

CVE-2024-58348 CVSS 9.8 EPSS 0.0019

WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. Attackers can upload PHP files through the file upload form in the plugin directory to execute arbitrary code on the server.

Critical severity issue in affected software published this week.

CVE-2024-58349 CVSS 9.8 EPSS 0.0015

WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to the theme directory and execute them to achieve remote code execution on the affected WordPress installation.

Critical severity issue in affected software published this week.

CVE-2026-11499 CVSS 9.8 EPSS 0.0009

A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.

Critical severity issue in affected software published this week.

Vulnerability Watch
All Stories ->
error: Content is protected !!