Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Two critical vulnerabilities, CVE-2026-67279 and CVE-2026-86060, allow unauthenticated SSH takeover of MikroTik RouterOS. CVE-2026-67279 exploits a state-machine flaw permitting rekey requests before authentication, while CVE-2026-86060 allows argument injection to gain full admin access. These vuln...
On May 4, 2026, Google published the Android Security Bulletin addressing a critical vulnerability tracked as CVE-2026-0073. This flaw, located in the System component of Android versions 14, 15, and 16, allows attackers to execute code remotely without user interaction. Devices still under support,...
In May 2026, a critical Android vulnerability (CVE-2026-0073) was disclosed, allowing remote device takeover without user interaction. This flaw, linked to the Android Debug Bridge, affects devices with ADB enabled, which some manufacturers mistakenly leave on. Concurrently, banking trojans have sur...