Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A Chinese-speaking threat actor has exploited a stack-based buffer overflow vulnerability (CVE-2026-7273) in Zyxel GS1900 switches, compromising 996 devices across 48 countries since August 17, 2026. The vulnerability allows unauthenticated attackers to execute OS commands via crafted HTTP requests....
CyberXero, a Russian-speaking initial access broker, has launched a dual-pronged campaign targeting WordPress sites and Ukrainian critical infrastructure, leveraging AI tools like Claude Code. The operation has led to the exfiltration of over 628,000 records from Ukrainian entities, with confirmed c...
A significant security flaw in WordPress, involving CVE-2026-63030 and CVE-2026-60137, allows unauthenticated attackers to execute remote code. This vulnerability affects WordPress versions 6.9.0 to 6.9.4 and has been actively exploited, with over 62,802 unique attacking IPs reported. The attack vec...
On July 17, 2026, WordPress disclosed two critical vulnerabilities, CVE-2026-63030 and CVE-2026-60137, affecting its core software. CVE-2026-63030 is a remote code execution (RCE) vulnerability in the REST API, while CVE-2026-60137 is a SQL injection flaw. Both vulnerabilities can be exploited by un...
