ThreatVectr

Vulnerabilities — Page 12

A hacker's workstation with multiple displays showing attack logs, credential theft timelines, and server breach patterns mapped across a digital interface, red
Vulnerabilities

Hackers Are Actively Exploiting a Critical Flaw in the AI Builder Langflow

A software vulnerability scored at near-maximum severity is being used right now to break into Langflow servers and steal credentials. Over 360 attacks hit tracking sensors in the UK in a single day.

3 min read
A software deployment dashboard displaying administrator access controls being progressively elevated, authentication logs showing unauthorized privilege escala
Vulnerabilities

Hackers Are Already Exploiting a Critical Flaw in JFrog Artifactory

A severe authentication weakness in a tool used by software teams worldwide was patched on August 28. Within days, attackers had found a way to use it to give themselves full administrator access.

3 min read
A firewall management console displaying multiple critical vulnerability alerts at severity level 9
Vulnerabilities

WatchGuard Patches Five Critical Flaws That Could Let Attackers Seize Control Remotely

WatchGuard has fixed more than two dozen vulnerabilities in its firewall software and management tools, including five rated 9.3 out of 10 in severity.

3 min read
A security researcher's workbench with multiple monitors displaying Kaspersky antivirus architecture diagrams, exploit code windows open, privilege escalation c
Vulnerabilities

Researcher Drops 'HardBreacher' Exploit for Kaspersky Security Software

A bug-hunter who has repeatedly embarrassed Microsoft now has Kaspersky in the crosshairs, releasing a proof-of-concept exploit that can hand an attacker near-total control of a Windows machine running Kaspersky Endpoint Security.

3 min read
A Ruby on Rails framework logo-adjacent visual of server logs cascading down, with red error indicators and file-access permission hierarchies highlighted
Vulnerabilities

Hackers Are Actively Exploiting a Near-Perfect-Score Flaw in Ruby on Rails

A critical vulnerability in the popular web framework lets criminals read files off a server and run their own code on it, and the official patch only closes half the door.

3 min read
A Windows Defender notification panel displayed prominently with false 'Antivirus is Off' warning, background showing actual active protection running, confusio
Vulnerabilities

Microsoft: Ignore the 'Antivirus Is Off' Warnings in Defender, It's a False Alarm

A bad notification, not a broken product. Microsoft says Defender is running normally despite pop-ups claiming otherwise, and a fix is on the way.

3 min read
A blockchain network visualization displayed on multiple monitors in a control room, with several nodes highlighted in red or flashing alert indicators across t
Vulnerabilities

Cosmos EVM Bug Drained Six Blockchains Over Five Days in August 2026

A critical balance-handling flaw in the shared Cosmos EVM module let attackers siphon funds from six chains between 20 and 25 August 2026, and the advisory landed without a CVE or CVSS score.

3 min read
A research facility's interior showing server equipment and scientific instrumentation, with cybersecurity warning symbols or breach indicators subtly visible i
Vulnerabilities

Chinese-Speaking Hackers Hit Philippine Nuclear Research Agency Through ownCloud Bug

CISA has flagged a critical flaw in the file-sharing tool ownCloud as actively exploited, after attackers used it to steal data from a nuclear research body in the Philippines.

3 min read
A website backend interface displaying WordPress plugin management dashboard, with multiple extensions visible and warning notifications highlighted in red acro
Vulnerabilities

Donation plugin flaw hands attackers full control of 100,000 WordPress sites

A maximum-severity bug in GiveWP lets anyone create an account and run commands on the server. The fix landed in version 4.16.7.2 on August 27.

3 min read
Office printers and print management equipment arranged in a corporate environment, with network cables and digital screens displaying status information and re
Vulnerabilities

PaperCut Rushes Out Second Fix as Attackers Chain Bugs to Run Code

A newly patched flaw in the widely used print management software is being actively exploited, and PaperCut has shipped emergency hardening on top of the original patch.

3 min read
A humanoid robot hand in close focus with intricate mechanical joints and articulated fingers, positioned near a small device or Bluetooth transmitter suggestin
Vulnerabilities

Bluetooth to Root: Researcher Finds Two Ways Into Unitree's G1 Humanoid

Two flaws in Unitree's G1 EDU robot hand an attacker full control of the machine, and one of them needs nothing but a Bluetooth signal.

4 min read
A software development environment displaying Git repository management interface with code diff and patch utilities visible, warning indicators appearing in th
Vulnerabilities

8,300 Gitea servers still exposed to a code injection bug attackers are already using

A flaw in Gitea's diffpatch endpoint lets low-privilege users run shell commands on the server. CISA gave federal agencies three days to patch. Most operators haven't.

3 min read
A server room or data center environment with networking equipment and cables, displaying multiple critical security patch notifications and system alerts on ma
Vulnerabilities

ServiceNow patches three top-severity flaws in its AI platform

Three of the four bugs score a maximum 10.0 on the industry severity scale, and one can be triggered by an attacker who has not logged in.

4 min read
Close-up of a circuit board with glowing red indicator lights and exposed firmware pathways, highlighting vulnerability points where unauthorized code could ent
Vulnerabilities

ZBT Routers Found With Two Hidden Factory Backdoors Handing Attackers Full Control

Researchers at VulnCheck say firmware shipped by Shenzhen Zhibotong Electronics contains two undocumented implants that let anyone on the internet run commands as root.

3 min read
A server rack with one machine highlighted in red among dozens of others, with a digital lock symbol fracturing across its surface to show vulnerability spreadi
Vulnerabilities

Critical cPanel Bug Lets a Single Hosting Customer Seize an Entire Server

A flaw in domain parking, tracked as CVE-2026-65643, could hand root control of a shared hosting server to any customer with an account on it.

4 min read
© 2026 Threat Vectr