Security news aggregator

Latest coverage for CVE

Stay informed on the latest CVE entries. Explore critical vulnerabilities and exposures to safeguard your systems from cyber threats and attacks.

14 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

CVE is a global system of standardized identifiers for publicly known cybersecurity vulnerabilities. Each record, typically written as CVE-YYYY-NNNN, gives a vulnerability a stable reference and usually includes a description, affected products or versions, and links to advisories or fixes. The CVE Program coordinates the assignment and publication of records through authorized organizations, allowing researchers, vendors, security tools, and defenders to discuss the same flaw without relying on different names.

Practitioners use CVE identifiers to match vulnerabilities across asset inventories, scanners, patch advisories, and threat-intelligence reports. A CVE is an identity, not a severity score or proof that a system is exploitable: prioritization should also consider the affected configuration, exposure, available mitigations, exploit activity, and business impact. Delays in identifying vulnerable versions can leave internet-facing services or embedded components exposed, while incomplete product-to-CVE mapping can cause missed remediation. Security teams should verify the affected versions and vendor guidance before patching or applying workarounds.

Volume over time

Weekly headline count for the current query.

Showing 14 most recent headlines Filtered view

Interlock's post-exploit toolkit exposed Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, according to Amazon security boss CJ Moses.…

The Register 19 Mar 2026, 6:40 a.m. Actively exploited CVE-2026-20131 0-Day Amazon (company) Cisco CVE Disclosure Exploit Exposure Firewalls Flaw Patch Ransomware Vulnerability

Security community needs to rally and share more info faster, one researcher says Amid new reports of attackers pummeling a maximum security hole (CVE-2025-55182) in the React JavaScript library, Cloudflare's technology chief said his company took down its own network, forcing a widespread outage early Friday, to patch React2Shell.…

The Register 6 Dec 2025, 10:46 a.m. Actively exploited CVE-2025-55182 Cloudflare CVE JavaScript Library Outage Patch

If at first you don’t succeed, patch and patch again More threat intel teams are sounding the alarm about a critical Windows Server Update Services (WSUS) remote code execution vulnerability, tracked as CVE-2025-59287 and now under active exploitation, just days after Microsoft pushed an emergency patch and the US Cybersecurity and Infrastructure Security Agency added the bug to its Known Exploited Vulnerabilities catalog.…

The Register 28 Oct 2025, 12:54 p.m. Actively exploited CVE-2025-59287 CVE Google Microsoft Patch Remote Code Execution Threat Intelligence Vulnerability

CVE-2017-11882 in discontinued Equation Editor still attracting keylogger campaigns despite software being killed off in 2018 Very few people are immune to the siren song of nostalgia, a yearning for a "better time" when this was all fields and kids respected their elders - and it looks like cyber criminals are no exception.…

The Register 14 Aug 2025, 3:45 a.m. Actively exploited CVE-2017-11882 CVE Discontinued Keylogger Patch

NetScaler vendor issued a patch but otherwise, stony silence Multiple exploits are circulating for CVE-2025-5777, a critical bug in Citrix NetScaler ADC and NetScaler Gateway dubbed CitrixBleed 2, and security analysts are warning a "significant portion" of users still haven't patched.…

The Register 8 Jul 2025, 8:31 a.m. Actively exploited CVE-2025-5777 Citrix Critical Vulnerability CVE Exploit Patch Research Vendor Warning

Roses are red, violets are blue, CVE-2024-53704 is perfect for a ransomware crew Miscreants are actively abusing a high-severity authentication bypass bug in unpatched internet-facing SonicWall firewalls following the public release of proof-of-concept exploit code.…

The Register 15 Feb 2025, 11:53 a.m. Actively exploited CVE-2024-53704 Authentication Bypass CVE Exploit Firewalls Patch PoC Ransomware VPN
The Register 2 years, 5 months ago

More mass exploits hit the same buggy Ivanti devices

At this point you might be better just shutting the stuff down All manner of miscreants are piling onto the latest Ivanti flaw, a server-side request forgery (SSRF) vulnerability tracked as CVE-2024-21893, according to threat hunters tracking the string of CVEs that have been plaguing the software shop's gateways over recent weeks.…

The Register 6 Feb 2024, 9:45 a.m. Actively exploited CVE-2024-21893 CVE Exploit Flaw Vulnerability

If you're still running a vulnerable instance then 'assume a breach' More than 600 IP addresses are launching thousands of exploit attempts against CVE-2023-22527 – a critical bug in out–of-date versions of Atlassian Confluence Data Center and Server – according to non-profit security org Shadowserver.…

The Register 23 Jan 2024, 12:37 p.m. Actively exploited CVE-2023-22527 Breach Critical Vulnerability CVE Exploit Remote Code Execution Vulnerability

At least two extortion gangs abusing CVE-2023-4966, we're told Citrix Bleed, the critical information-disclosure bug that affects NetScaler ADC and NetScaler Gateway, is now under "mass exploitation," as thousands of Citrix NetScaler instances remain vulnerable, according to security teams.…

The Register 1 Nov 2023, 9:45 a.m. Actively exploited CVE-2023-4966 Citrix CVE Disclosure Extortion Ransomware Vulnerability

That's a vulnerability that's under attack, fix available ... cancel those July 4th plans, perhaps? More than 338,000 FortiGate firewalls are still unpatched and vulnerable to CVE-2023-27997, a critical bug Fortinet fixed last month that's being exploited in the wild.…

The Register 4 Jul 2023, 11:17 a.m. Actively exploited CVE-2023-27997 Critical Vulnerability CVE Firewalls Fixed Fortinet Patch Vulnerability