CVE-2026-21510

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 10, 2026

Last Seen

October 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in ConnectWise ScreenConnect Exploited in Active Attacks72.9

ConnectWise ScreenConnect has been compromised by two critical vulnerabilities, CVE-2024-1708 and CVE-2024-1709, which allow attackers to bypass authentication and execute remote code. The vulnerabilities were disclosed on February 19, 2024, with CVE-2024-1709 rated critical (CVSS 10.0) for authenti...

Rising Incomplete Security Patches Expose Vulnerabilities to Attackers69.0

Research from Terra Security reveals that security patches are increasingly becoming incomplete, acting as guides for attackers to exploit vulnerabilities. The rate of broken fixes has surged eightfold in 2026, with patches for known exploited bugs being reported as broken four times more often than...

BlueHammer Zero-Day Exploit Released, Exposing Windows Users to Privilege Escalation66.6

A security researcher, known as Chaotic Eclipse, has publicly released exploit code for a zero-day vulnerability in Windows, dubbed BlueHammer, allowing local privilege escalation to SYSTEM or elevated administrator privileges. The exploit targets a flaw in the Windows Defender update mechanism and...

Vulnerability in Notepad's Markdown Feature Allows Remote Code Execution56.1

Researchers have discovered a vulnerability in Notepad's newly added Markdown support that can be exploited for remote code execution (RCE). This flaw, tracked as CVE-2026-20841 with a severity score of 8.8, was addressed in Microsoft's latest Patch Tuesday updates. The exploitation requires social...