Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
CVE-2026-69730 is a critical unauthenticated remote code execution vulnerability in Windows DNS Server, rated CVSS 9.8. It allows attackers to execute code without user interaction, primarily affecting domain controllers in Active Directory networks. This vulnerability is being compared to the infam...
On September 8, 2026, Microsoft released a record-breaking 974 patches for vulnerabilities across its products, including two actively exploited zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level, posing sig...
CVE-2025-55182 is a critical remote code execution vulnerability in Meta React Server Components, with a CVSS score of 10.0. It allows unauthenticated attackers to execute arbitrary commands on the server by sending crafted JSON payloads. This vulnerability was added to CISA's Known Exploited Vulner...
