Skip to content
COOEY
LIVE FEED
3576 events · 4 sources · newest first
Events in view
3576
all sources
Critical
1821
severity
Active sources
4
collectors
Last sync
2026-08-26 06:00
UTC
All data Vulns · 3576Regulatory · 143News · 392 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1767CISA KEV · 1677CISA advisory · 113DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2026-07-23 CISA advisory
Weintek cMT3092X ↗
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-204-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities...
authenticationcisacisa-advisorycmmccompliancecryptographycwecybersecurity
2026-07-23 NVD CVE
CVE-2026-15967: Insufficient session expiration vulnerability in Progress MOVEit Transfer. This HIGH
Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
cisacmmc-level-2compliancecve-2026-15967defense-industrial-basedodfedramp-authorizationincident-response
2026-07-23 CISA advisory
Rockwell Automation ThinManager ↗
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-204-05.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability...
cisacisa-advisorycisagovcmmc-level-2cve-2026-11917fedramp-authorizationicsa-26-204-05incident-response
2026-07-23 CISA advisory
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite ↗
<div class="c-page-title__buttons"><a class="c-button" href="https://media.defense.gov/2026/Jul/22/2003965244/-1/-1/1/CSA_RUSSIA_PHISHING_TARGET_ZIMBRA.PDF">Russian State-Supported Cyber Actors Conduct Phishing...
cisa-advisorycve-2025-66376cybersecuritydatum-exfiltrationespionagemalwaremitres-attckphishing
2026-07-23 NVD CVE
CVE-2026-65906: In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL s HIGH
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible
2026-07-22 NVD CVE
CVE-2026-60369: Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion CRITICAL
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...
availabilitybasis-score-99centralizes-thirdparty-jarconfidentialitycve-2026-60369cvss-31httpimpact
2026-07-22 NVD CVE
CVE-2026-60372: Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion CRITICAL
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...
availabilitybasis-score-98centralizes-thirdparty-jarconfidentialitycvss-31httpimpactintegrity
2026-07-22 NVD CVE
CVE-2026-60366: Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion CRITICAL
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...
basis-score-100centralizes-thirdparty-jarconfidentiality-integrity-availabilitycve-2026-60366cvss-31httpimpactjava
2026-07-22 NVD CVE
CVE-2026-50252: In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is rand CRITICAL
In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies...
cve-2026-50252dns-caches-poisoning-attacksdns-caches-poisoningsdns-transactionentropyload-balancing-policiesmalicious-actorsnvd-cve
2026-07-22 NVD CVE
CVE-2026-65590: n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restri CRITICAL
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). Shell commands executed by the tool...
computer-use-packagecve-2026-65590cybersecurityfilesystem-accessesincident-responselinuxmacon8n
2026-07-22 NVD CVE
CVE-2026-60367: Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion CRITICAL
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...
ac-lbasis-score-98c-hcentralizes-thirdparty-jarconfidentiality-integrity-availabilitycvas-ncvss-31h
2026-07-22 CISA KEV
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH ◈ 2 sources · orig. NVD CVE
Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.
code-executioncve-2026-50522deserializationmicrosoftmicrosoft-officenetwork-securitynvd-cvesharepoint
2026-07-22 NVD CVE
CVE-2026-2395: Improper neutralization of special elements used in an SQL command ('SQL injecti CRITICAL
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code...
cyber-attackscyber-securitydata-breachesimproper-neutralizationinformation-securityno-code-platformnvd-cvesecurities-risks
2026-07-22 CISA KEV
Check Point SmartConsole Improper Authentication Vulnerability HIGH ◈ 2 sources · orig. NVD CVE
Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative...
administrative-privilegescheck-pointcisa-kevcve-2026-16232improper-authentication-vulnerabilityremote-attacks
2026-07-22 CISA advisory
CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗
<p>CISA has added two new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation....
actives-exploitationsbinding-operational-directivesbod-26-04check-point-smartconsolecisacisa-advisorycommon-vulnerability-and-exposurecve-2026-16232
2026-07-22 NVD CVE
CVE-2026-16232: An authentication bypass vulnerability in the Check Point SmartConsole login pro CRITICAL ◈ 2 sources · orig. NVD CVE
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative...
administrative-privilegescheck-pointcisa-kevcve-2026-16232improper-authentication-vulnerabilityremote-attacks
2026-07-21 NVD CVE
CVE-2026-60551: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware CRITICAL
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...
2026-07-21 CISA KEV
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability HIGH
Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations.
arbitrary-code-executioncisa-kevcve-2026-0770cybersecurityfunctionalityinclusionlangflowremote-attacks
2026-07-21 NVD CVE
CVE-2026-60562: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware CRITICAL
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...
2026-07-21 NVD CVE
CVE-2026-8986: Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command CRITICAL
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can supply a crafted diagnostics URL that...
2026-07-21 NVD CVE
CVE-2026-60538: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60564: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware CRITICAL
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...
2026-07-21 NVD CVE
CVE-2026-60209: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...
availabilityconfidentialitycore-componentcve-2026-60209cvss-31data-compromiseintegritynetwork-access
2026-07-21 NVD CVE
CVE-2026-8985: Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command CRITICAL
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply crafted input in the url parameter to...
2026-07-21 NVD CVE
CVE-2026-61140: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware CRITICAL
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-61156: Vulnerability in the Oracle Commerce Guided Search Platform Services product of CRITICAL
Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-60567: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware CRITICAL
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...
2026-07-21 NVD CVE
CVE-2026-60540: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60565: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware CRITICAL
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability...
2026-07-21 NVD CVE
CVE-2026-61076: Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager produc CRITICAL
Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). The supported version that is affected is 9.2. Easily exploitable vulnerability...
2026-07-21 NVD CVE
CVE-2026-60297: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-61244: Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product o CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft (component: Manufacturing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...
2026-07-21 CISA KEV
DD-WRT Stack-Based Buffer Overflow Vulnerability HIGH
DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.
buffer-overflowcisa-kevcode-executioncve-2021-27137cybersecuritydd-wrtinformation-securitynetworks-devices
2026-07-21 NVD CVE
CVE-2026-60296: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60363: Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com CRITICAL
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-60381: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-56820: Netty is a network application framework for development of protocol servers and HIGH
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, `OcspClient` does not validate that the...
2026-07-21 NVD CVE
CVE-2026-60365: Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi CRITICAL
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). The supported version that is affected is...
2026-07-21 NVD CVE
CVE-2026-60210: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows...
availabilityconfidentialitycore-componentcve-2026-60210cvss-31data-compromiseintegritynetwork-access
2026-07-21 NVD CVE
CVE-2026-61145: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...
◀ PREV PAGE 16 / 90 NEXT ▶