ThreatVectr

Vulnerabilities — Page 27

Illustration: a dimly lit server room aisle at night
Vulnerabilities

A WordPress Bug Lets Strangers Run Code on Your Site. No Login Required.

Every WordPress 6.9 and 7.0 site was exposed until a Friday emergency patch. The fix is being force-installed.

3 min read
A network security dashboard displayed across multiple monitors showing warning alerts and breach notifications, with a keyboard and mouse in the foreground sug
Vulnerabilities

Ransomware Gang Exploited Two SonicWall Security Flaws Before a Fix Existed

A group tied to Inc ransomware broke into enterprise networks through a pair of critical holes in SonicWall remote-access devices, stealing credentials and preparing to lock down files.

3 min read
Illustration: a server rack in a dim data centre, one blade glowing faintly red, cables neatly arranged
Vulnerabilities

An 11-byte message can knock OpenSSL servers offline, researchers warn

A newly disclosed flaw nicknamed HollowByte lets attackers exhaust memory on servers running vulnerable versions of OpenSSL, the software that secures most of the web.

3 min read
A government building's exterior with its IT department visible through windows on an upper floor, desks with computer monitors glowing, suggesting discovery of
Vulnerabilities

OnlyFans Creators Are Accidentally Fixing Government Website Security

Adult content creators filing copyright takedowns are, as a side effect, helping university and government IT teams find hacked pages on their own websites.

3 min read
Illustration: a darkened office workstation showing a Windows-
Vulnerabilities

Windows 'LegacyHive' zero-day hands ordinary users admin power on fully patched PCs

A researcher published working attack code hours after Microsoft's July 2026 patches, and it still works. Microsoft has no fix yet, and no CVE has been assigned.

4 min read
A government IT department frantically updating systems at night, multiple technicians at workstations with security patches being deployed across networks, urg
Vulnerabilities

Hackers Are Already Exploiting a Critical Microsoft SharePoint Flaw Patched Just Days Ago

CISA has added a newly patched SharePoint vulnerability to its active-exploitation watchlist, giving US federal agencies just three days to apply the fix.

3 min read
Illustration: a dark server rack in a data centre with a single amber warning light glowing on one rack unit
Vulnerabilities

CISA gives federal agencies a weekend to patch two Fortinet flaws already under attack

Two critical bugs in Fortinet's FortiSandbox let intruders run code without a password. Attackers are already trying them. Federal agencies have until Sunday to install the fix.

3 min read
Illustration: a dimly lit server room with rack-mounted network security appliances, blinking amber status lights
Vulnerabilities

CISA Flags Three Actively Exploited Bugs in Fortinet and SharePoint

Two Fortinet FortiSandbox command-injection flaws and a Microsoft SharePoint deserialization bug are being used in real attacks, the US cyber agency warns.

3 min read
Illustration: a high-voltage electrical substation at dusk, rows of transformers and steel gantries under a deep blue sky
Vulnerabilities

Siemens Patches Four Flaws in SICAM 8 Grid Kit, Including a Firmware Signing Bypass

Siemens is pushing V26.20 firmware for gear that sits inside power stations. One bug lets an insider install their own firmware and have it survive every reboot.

3 min read
Illustration: a modern industrial factory floor
Vulnerabilities

A malformed packet can knock Rockwell's Flex 5000 Adapter offline until someone power-cycles it

Rockwell Automation has patched a denial-of-service flaw in a widely deployed factory-floor module. The fix ships as firmware 6.012.

3 min read
A factory floor with industrial control panels displaying dated interfaces and green monochrome screens, connected via tangled cables to modern equipment, showi
Vulnerabilities

The Machines That Run the World Are Running Decades-Old Software

Industrial control systems keep factories, water plants, and power grids alive. They also run code written before Wi-Fi existed. Fixing that is harder than it sounds.

3 min read
A modern white robot vacuum cleaner sitting on a wooden living room floor, its top cover removed to expose a green circuit board and a small memory chip, warm d
Vulnerabilities

One Hacked Shark Robot Vacuum Can Hand an Attacker the Keys to Every Shark Vacuum in the Region

A researcher pulled a security key off a $500 robot vacuum and used it to run commands on other people's Shark vacuums, including reading their Wi-Fi passwords in plaintext.

4 min read
A computer monitor split into two sections, one showing Splunk's interface with vulnerability indicators, the other showing Zoom's login screen, both with patch
Vulnerabilities

Splunk and Zoom Fix Security Flaws That Could Let Hackers Take Over Accounts

Both companies pushed out patches this week. One Zoom flaw scores a near-perfect danger rating and could let a criminal break into accounts without knowing a password.

3 min read
Illustration: a dimly lit corporate server room with rows of blue-lit racks
Vulnerabilities

US government orders emergency patch for critical Oracle finance software flaw

CISA gave federal agencies until Saturday to fix CVE-2026-46817, an Oracle E-Business Suite bug already under attack.

3 min read
A network operations room with servers labelled with F5, NGINX, and BIG-IP infrastructure, with patch alert notifications cascading across monitoring screens
Vulnerabilities

F5 Fixes Serious Security Flaws in NGINX and BIG-IP

Patches are now available for multiple vulnerabilities in two widely used networking products that could have let attackers take control of systems, crash services, or steal data.

3 min read
© 2026 Threat Vectr