ThreatVectr

Vulnerabilities — Page 10

A MacBook Pro laptop on a desk showing virtualization software running, with a privilege escalation vulnerability diagram and an incompatible system requirement
Vulnerabilities

Parallels Desktop Bug Hands Root to Any Mac User, and Older Macs Can't Get the Patch

A flaw in Parallels Desktop for Mac lets a normal user seize full control of the machine. The fix ships only in Parallels Desktop 27, which won't install on Intel-based Macs.

4 min read
A telecommunications server room with blinking indicator lights and cables, a computer screen in the foreground showing active system access logs and unauthoriz
Vulnerabilities

Hackers Are Actively Exploiting a Critical Issabel Flaw That Hands Over Full Server Control

CVE-2026-89026 lets unauthenticated attackers run any command they want on vulnerable phone-system servers. Attacks are already happening.

4 min read
A smartphone screen showing the Chrome browser interface with a warning alert overlaid, surrounded by blurred cybersecurity monitoring dashboards and threat det
Vulnerabilities

Google Patches Fifth Chrome Zero-Day of 2022 as Attacks Continue

A flaw in how Chrome handles Android deep links is being actively exploited. It's the fifth Chrome vulnerability criminals have used in the wild this year, and the patch window is tight.

3 min read
Illustration: A dimly lit enterprise server room at night
Vulnerabilities

Cisco's Network Gatekeeper Has a Perfect-10 Flaw and Hackers Are Already Inside

A zero-day in Cisco Identity Services Engine lets anyone on the internet walk past the login screen entirely. Federal agencies have three days to patch. There is no workaround.

3 min read
A Red Hat identity management system interface with unauthorized administrator account creation happening in real-time, showing Kerberos authentication being by
Vulnerabilities

FreeIPA Bug Lets Unknown Users Mint Themselves Admin Accounts

A two-flaw chain in Red Hat's identity system lets an anonymous client create a Kerberos account and land in the administrators group with no credentials required.

4 min read
A network operations center monitoring display showing thousands of MikroTik routers being compromised simultaneously through coordinated exploitation, with red
Vulnerabilities

Hackers Are Taking Over MikroTik Routers Through a Chained Attack Called MikroTrick

Two critical flaws in MikroTik's RouterOS software are being actively exploited together to seize full control of internet-facing routers. More than 120,000 devices are exposed. Patches are available now.

3 min read
Server racks in a data center with warning lights illuminated, a computer terminal showing Telerik software interface with cryptographic error messages, chains
Vulnerabilities

Public exploit turns Telerik padding-oracle flaw into full server takeover

TantoSec's proof-of-concept chains a cryptographic weakness in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution, but only bites sites in a non-default setup that Progress patched in July.

4 min read
A security researcher's desk with multiple monitors displaying code exploits, vulnerability details, and security software logos (CrowdStrike, Avast, Nvidia), d
Vulnerabilities

One Researcher Just Published Working Hacks Against CrowdStrike, Avast, and Nvidia

A prolific security researcher dropped three zero-day exploits in a single week, targeting software that millions of people and businesses rely on to stay safe.

4 min read
An IT service provider's office with technicians at workstations displaying N-able N-central remote management software, critical alert banners visible across m
Vulnerabilities

A Zero-Day With a Perfect Danger Score Is Being Exploited in N-able's Remote Management Software

Three vulnerabilities in four days have left IT service providers scrambling to patch N-central, the tool they use to remotely manage their customers' computers. One flaw is already being used by attackers.

3 min read
An IT support center with multiple workstations running remote support software, ScreenConnect interface visible on screens, file transfer dialogs open, warning
Vulnerabilities

ConnectWise ScreenConnect Hit by New File-Transfer Flaw, Patch Days Away

The remote-support tool used by IT teams worldwide has a bug that lets attackers move files through active sessions. A fix is expected this week.

3 min read
An emergency response situation in an IT operations center with multiple screens showing N-central platform alerts, critical severity warnings flashing, exposed
Vulnerabilities

N-able rushes emergency fix for critical flaw in tool used to run thousands of company networks

A maximum-severity bug in N-able's N-central platform lets attackers run their own code on unpatched servers. Nearly 1,500 sit exposed on the public internet.

3 min read
A MikroTik router with indicator lights glowing on a network rack, surrounded by terminal windows showing unauthorized access logs
Vulnerabilities

Hackers Are Taking Over MikroTik Routers Left Open on the Internet

Poland's national cyber team warns that criminals are grabbing full control of MikroTik routers through an exposed remote-access service, with attacks running since at least early September.

3 min read
An Adobe Commerce storefront dashboard on a desktop, with network traffic visualization showing unauthorized backdoor connections in the admin panel
Vulnerabilities

Magento Zero-Day 'StyleSmuggler' Lets Attackers Backdoor Online Stores

Sansec says exploitation of the unpatched Adobe Commerce flaw began September 4, with no vendor fix yet available.

4 min read
A VMware Workstation virtual machine window open on a desktop, with a system terminal showing privilege escalation commands being executed
Vulnerabilities

Broadcom Patches Critical VMware Workstation Flaw That Lets Admins Escape to the Host

An integer-overflow bug rated 9.3 out of 10 lets a privileged user inside a virtual machine run code on the underlying computer.

3 min read
A PaperCut print management software interface on a school network admin dashboard, with security logs showing suspicious login attempts and data exfiltration
Vulnerabilities

Hackers Exploit PaperCut Bugs to Steal Logins From Schools and Universities

Researchers say attackers are chaining two fresh flaws in the popular print management software to break into education networks across the US and Europe.

3 min read
© 2026 Threat Vectr