Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 THN:DBB7D43EBD3...

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs_THN:DBB7D43EBD32D9B6D51C0558B77E438D

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDOIX9PorKjXDciuKmL8xLL9vrOVtBou5tBhn4T-u7cgllDKei3HRDr8vsXGM-MllL1eb6E_pdEID5s_sRUx...

N/A N/A THN
CRITICAL 10 D08D4EF5-0307-

Exploit for CVE-2026-10520_D08D4EF5-0307-5336-8253-F56FE19CCC6B

CVE-2026-10520 — Ivanti Sentry Mass Scanner Detection scanner for CVE-2026-10520, an OS command injection vulnerability in Ivanti Sentry. Vulnerabi...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.1 2C789584-82FD-

Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os_2C789584-82FD-5503-B3B1-B5B9573BD5DA

🚨 CVE-2026-0257 – PAN-OS GlobalProtect Authentication Bypass Security research, technical analysis, detection guidance, IOC collection, and defens...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.1 C1CCFFF3-2CB0-

Exploit for Incorrect Authorization in Vercel Next.Js_C1CCFFF3-2CB0-5007-ACAB-0173D4F36B96

CVE-2025-29927 Lab Minimal reproduction lab for CVE-2025-29927 — Next.js middleware authorization bypass CVSS 9.1. Companion to: N-Day Analysis wri...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.3 CVE-2026-45328

ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers_CVE-2026-45328

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wr...

espressif esp-idf = 5.5.4 CVE
CRITICAL 9.2 CVE-2025-66276

QTS_CVE-2025-66276

QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later

QNAP Systems Inc. QTS 5.2.0 CVE
CRITICAL 10 CVE-2026-48303

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)_CVE-2026-48303

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in ar...

Adobe Adobe Campaign Classic (ACC) CVE
CRITICAL 10 CVE-2026-47938

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)_CVE-2026-47938

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could re...

Adobe Adobe Campaign Classic (ACC) 7.4.3 build 9394 and earlier CVE
CRITICAL 9.6 CVE-2026-47928

ColdFusion | Improper Input Validation (CWE-20)_CVE-2026-47928

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code exec...

Adobe ColdFusion CVE
CRITICAL 9.4 CVE-2026-44963

CVE-2026-44963_CVE-2026-44963

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

Veeam Backup and Replication CVE