Related Threat Clusters
-
Critical Joomla JCE Vulnerability Under Active Exploitation
A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and…
33 articles · Updated June 17, 2026 -
Critical RCE Vulnerability in Blocksy Companion Pro Plugin Discovered
A critical vulnerability, CVE-2026-58480, has been identified in the Blocksy Companion Pro plugin for WordPress versions prior to 2.1.47. This unauthenticated arbitrary file upload vulnerability allows attackers to…
2 articles · Updated July 9, 2026 -
New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure
Forescout Technologies has identified 22 new vulnerabilities in serial-to-IP converters from Lantronix and Silex, which are widely used in critical sectors like healthcare and utilities. These vulnerabilities,…
9 articles · Updated April 21, 2026 -
CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices
On April 24, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. The affected products include SimpleHelp remote management software, Samsung MagicINFO 9 Server, and…
3 articles · Updated April 26, 2026 -
Critical RCE Vulnerability in Divi Form Builder Plugin for WordPress
The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload, allowing Remote Code Execution in all versions up to 5.1.8. This vulnerability arises from insufficient file extension validation in the…
9 articles · Updated July 3, 2026 -
Critical Remote Code Execution Vulnerability in GitBucket Disclosed
A critical vulnerability (CVE-2018-25332) has been identified in GitBucket version 4.23.1, allowing unauthenticated remote code execution. Attackers can exploit weak secret token generation and insecure file upload…
2 articles · Updated May 17, 2026 -
UAT-10147 Cybercrime Group Integrates AI for Large-Scale Attacks
In early 2026, Cisco Talos identified UAT-10147, a Chinese-speaking cybercrime group targeting vulnerable web servers across multiple countries, including Brazil, China, and Canada. The group employs agentic AI to…
10 articles · Updated August 20, 2026 -
Critical Ruby on Rails Vulnerability Exploited in the Wild
A critical-severity vulnerability in Ruby on Rails, tracked as CVE-2026-66066 and dubbed KindaRails2Shell, is being actively exploited by hackers, leading to remote code execution (RCE). Disclosed on July 30, 2026, this…
2 articles · Updated August 31, 2026 -
Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress
A critical vulnerability chain, dubbed wp2shell, has been identified in WordPress Core, allowing unauthenticated attackers to execute arbitrary code on default installations. This vulnerability is tracked as…
78 articles · Updated July 20, 2026 -
Critical RCE Vulnerability in Vvveb CMS v1.0.8 Discovered
A remote code execution vulnerability, identified as CVE-2026-6257, has been discovered in Vvveb CMS version 1.0.8. The flaw resides in the media management functionality, where a missing return statement in the file…
4 articles · Updated April 21, 2026
Recent Intelligence Reports
- 2026 08 07 — docs.vulncheck.com · August 31, 2026
- Elementor Pro CVE-2026 — Op-C · August 21, 2026
- WordPress plugin Elementor Pro vulnerability: 6 million websites at risk — Heise.De · August 21, 2026
- Critical vulnerability in Elementor Pro allows unauthenticated file upload and RCE — Feeds.Feedburner · August 21, 2026
- UAT-10147: Chinese-speaking adversary integrates agentic AI into post — Blog.Talosintelligence · August 20, 2026
- CVE-2026-15748: Forminator File Upload Flaw — Socprime · August 19, 2026
- Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin — Patchstack · August 19, 2026
- Unauthenticated RCE Vulnerability Patched in Forminator Forms Plugin — Beyondmachines · August 19, 2026