Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Recent reports indicate multiple critical vulnerabilities are being actively exploited, including zero-day exploits for Citrix NetScaler ADC and Gateway (CVE-2026-88771, CVE-2026-88772) and PaperCut NG/MF. The vulnerabilities allow unauthenticated remote code execution, posing significant risks to a...
A Chinese-speaking threat actor has exploited a stack-based buffer overflow vulnerability (CVE-2026-7273) in Zyxel GS1900 switches, compromising 996 devices across 48 countries since August 17, 2026. The vulnerability allows unauthenticated attackers to execute OS commands via crafted HTTP requests....
A critical vulnerability in Veeam Agent for Windows, tracked as CVE-2026-32996, allows local users to escalate privileges to SYSTEM. The flaw affects versions up to 13.0.2.1102 and was publicly disclosed on September 14, 2026, with a proof-of-concept exploit released shortly thereafter. Attackers ne...
