vulnerabilityvia Microsoft Security Update Guide
CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Oct 21, 2026 UTC
Security news
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-97783 Microsoft Office SharePoint Spoofing Vulnerability
The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current release of...
Oct 21, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-83709 Windows NTLM Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Oct 21, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Oct 21, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Oct 21, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
Sep 24, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
Sep 11, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
FreePBX 17.0.2 - Remote Code Execution (RCE)
Sep 3, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Metabase 0.61.0 - Authenticated Remote Code Execution
Sep 3, 2026 UTC
generalvia Exploit-DB (latest)
[dos] EVerest 2025.9.0 - DoS
EVerest 2025.9.0 - DoS
Sep 2, 2026 UTC
generalvia Exploit-DB (latest)
[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
Sep 2, 2026 UTC
generalvia Exploit-DB (latest)
[webapps] PodcastGenerator 3.2.9 - Stored XSS
PodcastGenerator 3.2.9 - Stored XSS
Sep 2, 2026 UTC