ThreatVectr

Vulnerabilities — Page 26

Illustration: an industrial smart plug device mounted on a metal DIN rail inside a factory electrical cabinet
Vulnerabilities

Siemens Rushes Fix for Smart Plug Riddled With Eight Serious Flaws

The SIDIS Secured SmartPlug carried a critical 9.8-rated bug plus seven more in bundled open-source libraries. Siemens says update to V7.26.0310.

3 min read
Illustration: a dimly lit corporate server room, rows of rack-mounted servers glowing with amber and blue status lights
Vulnerabilities

Third SharePoint Flaw From July Patch Batch Is Now Being Attacked

CVE-2026-50522 lets unauthenticated attackers run code on SharePoint servers. A public proof-of-concept dropped, and the exploitation followed.

4 min read
Illustration: a dimly lit server room with a single rack door open
Vulnerabilities

The Patch Race Is Now a Patch Sprint, and Defenders Are Losing

When vendors ship a security fix, attackers reverse-engineer it within hours. The window to update has shrunk from weeks to a working day.

3 min read
A security researcher's workspace showing the moment of discovery: a laptop screen displaying Meta's internal support system with exposed user chat records and
Vulnerabilities

Meta Paid a Researcher $78,000 to Find a Flaw That Exposed Support Chats and Personal Data

An independent security researcher discovered a hole in Meta's internal support system that could have let anyone read private conversations between users and Meta support staff. Meta patched it. Then came the cheque.

3 min read
Illustration: a darkened server room with a single glowing amber warning light reflected on rows of rack-mounted hardware
Vulnerabilities

Hackers Chain Two WordPress Bugs to Hijack Sites Without a Password

The flaw pair, nicknamed wp2shell, lets attackers take over vulnerable WordPress sites remotely. Mass scanning is already underway.

3 min read
A business email server room with technicians performing emergency maintenance and applying patches, with Zimbra interface screens visible displaying the comman
Vulnerabilities

Zimbra Patches Six Security Flaws, Including a Bug That Lets Strangers Run Commands on Your Email Server

The business email platform Zimbra has released a batch of fixes covering a serious command-injection flaw and five other vulnerabilities. No attacks in the wild have been confirmed, but the company is urging every customer to update immediately.

3 min read
Illustration: a large server room aisle at night, cool blue LED indicator lights along both rows of racks
Vulnerabilities

The Real Mythos Problem Isn't New Bugs. It's How Long Yours Stay Open.

Anthropic's AI-driven vulnerability finder has flooded the pipeline since April. But the harder question for defenders is how many days a known flaw sits unpatched on their own network.

3 min read
A WordPress admin dashboard displayed on a monitor with warning indicators and vulnerability highlights visible, shadowy hands reaching toward the screen from o
Vulnerabilities

A Flaw in WordPress's Core Code Lets Criminals Take Over Websites Without Logging In

A newly discovered vulnerability in WordPress versions 6.9 and 7.0 lets attackers run their own commands on any affected site with no password required. Patches are out now.

3 min read
Illustration: a dimly lit corporate server room, rows of rack-mounted servers with amber and red status LEDs glowing
Vulnerabilities

Microsoft admits Windows update server sync has been broken for over a week

WSUS synchronization failures have blocked enterprise Windows updates since July 13, 2026, with only new installations fully restored so far.

4 min read
Illustration: a modern enterprise data centre corridor at night
Vulnerabilities

Hackers Start Breaking Into ServiceNow AI Platform Through Critical Flaw CVE-2026-6875

Attackers are exploiting a pre-authentication bug in ServiceNow's flagship platform just days after patches shipped, researchers confirm.

4 min read
A software developer's workspace with Chrome browser open and developer tools displaying memory-related error logs and vulnerability patch notes highlighted in
Vulnerabilities

Google Patches Seven Memory Safety Bugs in Chrome 150, Three Rated Critical

All seven flaws were found internally or by researchers, not by criminals. But history says patch fast anyway.

3 min read
A WordPress website dashboard under active attack, with visual indicators of exploit attempts and unauthorized commands being executed, warning panels and secur
Vulnerabilities

WP2Shell: Two WordPress Flaws Are Being Exploited Right Now, and Millions of Sites Are at Risk

A pair of newly patched security holes in WordPress are already being used in live attacks. No login required. No special setup needed. Just a vulnerable website.

3 min read
Illustration: a dimly lit server rack in a data centre, one status light glowing red among rows of green
Vulnerabilities

Critical NGINX Flaw Lets Attackers Crash Web Servers From Afar

F5 has patched CVE-2026-42533, a memory bug in nginx that a remote attacker can trigger with a single crafted request.

3 min read
Illustration for the story: SonicWall VPN Appliances Hit by Zero-Day Attacks Weeks Before Public Warning
Vulnerabilities

SonicWall VPN Appliances Hit by Zero-Day Attacks Weeks Before Public Warning

A newly identified group, tracked as UTA0533, broke into SonicWall SMA 1000 devices using unknown flaws from late June 2026 and gained the highest level of access on the affected hardware.

3 min read
Illustration: a laptop screen showing a generic file-archive dialog with a compressed folder icon highlighted
Vulnerabilities

7-Zip Ships Emergency Fix for Flaw That Lets Booby-Trapped Archives Run Code

Version 26.02 patches a heap buffer overflow in XZ decompression. There is no auto-update, so users have to grab it themselves.

3 min read
© 2026 Threat Vectr