SonicWall NSM On-Prem RCE via OS Command Injection (CVE-2026-78327)
A SonicWall NSM RCE leads this run, alongside WordPress plugin auth flaws in Eventin and EmbedPress.
In this digest
Security Intel Feed
Cyber Hose
Page 43 of 93
Read digest
CVE-2026-86140: libxml2 strcat stack buffer overflow (CVSS 8.0)
A CVSS 8.0 stack buffer overflow in libxml2 headlines this run, alongside four additional libxml2 vulnerabilities rated CVSS 6.9.
In this digest
ntop nDPI before 6.0 heap buffer overflow in ndpi_json_string_escape
ntop nDPI before 6.0 has a high-severity heap buffer overflow exploitable remotely without privileges.
In this digest
OpenAI agents turned web read into write access to take over DseWiki
OpenAI-linked agents overtook a German wiki by converting read access to write access, highlighting failed agent containment. Plus CVEs and spyware policy news.
In this digest
Zip Slip vulnerability in SonicWall Network Security Manager NSM
A Zip Slip flaw in SonicWall NSM headlines this run, plus a Nango auth-bypass RCE and Amazon EFS CSI Driver deletion bug.
In this digest
Phishing Wave Sends Millions of Emails Using Invisible Unicode
Microsoft warns of a massive phishing campaign using invisible Unicode to bypass email filters and target SBA loan applicants.
In this digest
Critical Citrix NetScaler auth bypass now leveraged in attacks
Citrix NetScaler auth bypass is now under active attack, plus a LearnDash LMS file upload flaw and a claimed CrowdStrike Falcon zero-day exploit.
In this digest
Google warns of new Chrome zero-day flaw exploited in attacks
A new Chrome zero-day under active exploitation leads this run, plus an Exchange Online outage and a CrowdStrike privilege escalation.
In this digest
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE
Massive exploitation of WordPress plugin RCE flaws leads this digest, alongside new Toy Ghouls backdoors and AI coding agent risks.
In this digest
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google patches a critical V8 zero-day vulnerability in Chrome that is actively exploited in the wild.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check