Security news aggregator

Latest coverage for Critical Vulnerability

Critical vulnerabilities can let attackers bypass security controls, compromise systems, or steal data, requiring urgent risk assessment and remediation.

50 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

A critical vulnerability is a software or hardware flaw that allows attackers to execute highly damaging actions, such as remote code execution or privilege escalation, with little or no user interaction. These vulnerabilities often affect core system components or widely used services, making them attractive targets for exploitation. The severity rating "critical" indicates that successful exploitation can lead to full system compromise or significant operational disruption.

Security practitioners must prioritize identifying and patching critical vulnerabilities promptly to reduce exposure to automated attacks and wormable exploits. Effective mitigation includes applying vendor patches, deploying intrusion detection systems tuned for exploit patterns, and restricting network access to vulnerable services. Understanding the exploitability and impact scope of a critical vulnerability helps allocate resources efficiently and maintain system integrity under active threat conditions.

Volume over time

Weekly headline count for the current query.

Showing 20 most recent headlines of 50 Filtered view

Attackers are exploiting a critical flaw in Oracle E-Business Suite, CVE-2026-46817, that allows remote, unauthenticated attackers to take over Oracle Payments. A critical vulnerability in Oracle E-Business Suite, tracked as CVE-2026-46817, is being actively exploited in the wild, according to cybersecurity firm Defused Cyber. “CVE-2026-46817 (CVSS 9.8 unauth HTTP takeover in Oracle E-Business) is being […]

More from Security Affairs 30 Jun 2026, 9:01 p.m. Incident · 4 stories Actively exploited CVE-2026-46817 Critical Vulnerability CVE Exploit Flaw Oracle Unauthenticated Vulnerability

Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux. [...]

More from Bleeping Computer 30 Jun 2026, 2:00 a.m. Actively exploited CVE-2026-48558 Critical Vulnerability CVE Disclosure Flaw Linux macOS Malware Microsoft Vulnerability

Attackers are exploiting the critical CVE-2026-10520 flaw in Ivanti Sentry, compromising many internet-exposed gateways shortly after patches were released. Threat actors have started exploiting a maximum-severity OS command injection flaw in Ivanti Sentry, tracked as CVE-2026-10520, that allows remote code execution with root privileges. “An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote […]

More from Security Affairs 12 Jun 2026, 5:57 a.m. Incident · 2 stories Actively exploited CVE-2026-10520 Compromise Critical Vulnerability CVE Exposure Flaw Patch Remote Code Execution Root Access Threat Actor Vulnerability

Attackers are exploiting the critical CVE-2026-10520 flaw in Ivanti Sentry, compromising many internet-exposed gateways shortly after patches were released. Threat actors have started exploiting a maximum-severity OS command injection flaw in Ivanti Sentry, tracked as CVE-2026-10520, that allows remote code execution with root privileges. “An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote […]

More from Security Affairs 12 Jun 2026, 5:57 a.m. Incident · 2 stories Actively exploited CVE-2026-10520 Compromise Critical Vulnerability CVE Exposure Flaw Patch Remote Code Execution Root Access Threat Actor Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild

More from The Hacker News 4 Jun 2026, 4:30 a.m. Theme · 2 stories Actively exploited CVE-2026-45247 America CISA Critical Vulnerability CVE Flaw Remote Code Execution Vulnerability

A critical vulnerability, tracked as CVE-2026-45659, in Microsoft SharePoint can allow attackers to achieve remote code execution with little effort. Microsoft released security updates to patch a high-severity SharePoint vulnerability, tracked as CVE-2026-45659 (CVSS score of 8.8), that could allow remote code execution. The flaw does not require complex conditions for exploitation, making it a […]

More from Security Affairs 27 May 2026, 7:10 p.m. Incident · 2 stories Actively exploited CVE-2026-45659 Critical Vulnerability CVE Flaw Microsoft Patch Remote Code Execution Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow framework for building AI agents. [...]

More from Bleeping Computer 27 Mar 2026, 8:17 a.m. Actively exploited CVE-2026-33017 Artificial Intelligence CISA Critical Vulnerability CVE Flaw Framework Vulnerability Warning

SolarWinds has released hot fixes to address a critical security flaw impacting its Web Help Desk software that, if successfully exploited, could allow attackers to execute arbitrary commands on susceptible systems

More from The Hacker News 24 Sep 2025, 12:46 a.m. Actively exploited CVE-2025-26399 Critical Vulnerability CVE Flaw Remote Code Execution SolarWinds Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting Dassault Systèmes DELMIA Apriso Manufacturing Operations Management (MOM) software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation

More from The Hacker News 12 Sep 2025, 11:03 p.m. Actively exploited CVE-2025-5086 America CISA Critical Vulnerability CVE Flaw Vulnerability Warning