Security teams are inundated with vulnerability alerts daily, but not every “critical” CVE warrants an emergency response....
CVSS
Multiple critical vulnerabilities in Versa Networks’ Concerto platform remain unpatched, exposing enterprise networks to authentication bypass and...
A critical authentication bypass vulnerability (CVE-2025-47949) in the Node.js SAML library samlify allows attackers to forge admin-level...
A recently discovered vulnerability in O2 UK’s implementation of Voice over LTE (VoLTE) and WiFi Calling technologies...
Microsoft has addressed a critical issue affecting dual-boot systems where Linux distributions failed to boot after installing...
Ivanti has issued an urgent patch advisory for two zero-day vulnerabilities (CVE-2025-4427 and CVE-2025-4428) affecting its Endpoint...
Microsoft’s May 2025 Patch Tuesday has delivered critical security updates addressing 72 vulnerabilities, including five zero-days actively...
Fortinet has released urgent security updates to address a critical remote code execution (RCE) vulnerability actively exploited...
Ivanti has issued urgent security updates for its Neurons for ITSM IT service management solution, addressing a...
A newly discovered vulnerability in Intel CPUs, dubbed “Branch Privilege Injection,” allows attackers to extract sensitive data...
A recent security disclosure highlights how a seemingly robust frontend regex filter in a username field was...
Mozilla has addressed multiple high-severity vulnerabilities in Firefox and Thunderbird, specifically affecting versions below 138 and 128.10....
Google has addressed 46 security flaws in its May 2025 Android security updates, including a high-severity vulnerability...
A critical zero-click vulnerability in Microsoft’s Telnet Client (telnet.exe) has been identified, allowing attackers to steal Windows...
A critical pre-authentication denial-of-service (DoS) vulnerability in Microsoft’s Windows Deployment Services (WDS) allows attackers to crash systems...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding an actively exploited remote...
A critical buffer overflow vulnerability (CVE-2025-4298) has been identified in Tenda AC1206 routers, affecting firmware versions up...
A high-severity vulnerability (CVE-2025-4279) has been identified in the WordPress External Image Replace plugin, enabling authenticated attackers...
A critical command injection vulnerability (CVE-2025-45042) has been identified in Tenda AC9 routers running firmware version 15.03.05.14,...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has escalated the urgency around a critical vulnerability in...
