Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
SonicWall disclosed two critical vulnerabilities in its SMA1000 series appliances, CVE-2026-83548 and CVE-2026-83549, which are being actively exploited. CVE-2026-83548 is a pre-authentication server-side request forgery (SSRF) vulnerability rated 10.0 on the CVSS scale, allowing unauthenticated att...
Google has released an emergency update for Chrome to address CVE-2026-85046, a high-severity zero-day vulnerability in the V8 JavaScript and WebAssembly engine, rated 8.8 on the CVSS scale. The flaw, identified as a type confusion issue, allows remote attackers to execute arbitrary code within Chro...
GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code...
Two critical vulnerabilities, CVE-2026-67279 and CVE-2026-86060, allow unauthenticated SSH takeover of MikroTik RouterOS. CVE-2026-67279 exploits a state-machine flaw permitting rekey requests before authentication, while CVE-2026-86060 allows argument injection to gain full admin access. These vuln...