Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
CVE-2026-48842 is a critical pre-authentication SQL injection vulnerability in Roundcube Webmail's virtuser_query plugin, affecting versions prior to 1.6.16 and 1.7.1. The flaw allows unauthenticated attackers to inject arbitrary SQL statements, potentially compromising sensitive data such as mail a...
Zenity Labs has uncovered multiple vulnerabilities in Salesforce's Agentforce, collectively termed 'SalesBleed.' These flaws allow attackers to exploit public Web-to-Lead forms to execute 0-click data exfiltration and hijack trusted AI agents for phishing. Specifically, two vulnerabilities enable si...
Multiple vulnerabilities in OpenSSL have been disclosed, affecting various Ubuntu LTS versions. Key issues include improper handling of certificate revocation lists (CVE-2026-35189), leading to potential denial of service, and timing side-channel attacks due to incorrect scalar multiplication (CVE-2...
