CVE Archives – Page 2 of 3

GitLab CVE-2026-19478: A Critical GraphQL Flaw Lets Unauthenticated Attackers Delete Your Projects — Patch Now

Aug 18, 2026 • CVE

On August 17, 2026, GitLab broke its normal release schedule and shipped an emergency, out-of-band security patch. The reason: a critical GraphQL vulnerability, CVE-2026-19478,...

CVE-2026-64638: How a Single Failed WordPress Login Can Lead to Full Server Takeover

Aug 10, 2026 • CVE

On August 6, 2026, WordPress shipped an emergency security patch that every site owner should install immediately. Security researchers at pwn.ai uncovered a critical...

CVE-2026-64564: The 18-Year-Old Linux Kernel Bug That Lets Attackers Break Out of Containers

Aug 9, 2026 • CVE

Every few years, the Linux kernel community confronts a vulnerability so old that it predates entire generations of cloud infrastructure. CVE-2026-64564 — nicknamed SCTPhantom...

CVE-2026-64638 | From Login Box to Server Shell: How It Turns a WordPress XSS Flaw into Full RCE

Aug 8, 2026 • CVE

Cross-site scripting (XSS) bugs usually sit at the bottom of every penetration test report, tagged as “low” or “medium” severity. Security teams patch them...

TeamCity Under Attack: What CVE-2026-63077 Means for Your CI/CD Pipeline

Aug 6, 2026 • CVE

If your organization runs JetBrains TeamCity on your own servers, you need to stop and check your version today. A new critical flaw, tracked...

CVE-2026-33591: Critical Authentication Bypass in WAPT Server — What You Need to Know Now

Aug 5, 2026 • CVE

Software deployment tools sit at the heart of every IT infrastructure. When one carries a security flaw, the ripple effects spread fast. This post...

cPanel CVE-2026-58048: A Critical Database Flaw That Hands Root Power to Regular Users

Aug 5, 2026 • CVE

cPanel powers millions of websites worldwide. When a critical flaw surfaces in this platform, the ripple effect touches hosting providers, web developers, and business...

CVE-2026-66066: The Critical Rails Active Storage Flaw That Puts Your Server’s Secrets on the Line

Aug 2, 2026 • CVE

Every few months a vulnerability lands that makes IT teams drop what they’re doing. CVE-2026-66066 is one of those. It hits Ruby on Rails’...

CVE-2026-48449: Inside Adobe Campaign Classic’s Second Maximum-Severity RCE Flaw in Just One Month

Aug 2, 2026 • CVE

In under a month, Adobe Campaign Classic was hit by two separate maximum-severity vulnerabilities, both scoring a perfect 10.0 on the CVSS scale, and...

CVE-2026-58644 SharePoint Zero-Day: Patch Guide 2026

Jul 25, 2026 • CVE

On 14 July 2026, Microsoft released emergency patches for two critical vulnerabilities in SharePoint Server: CVE-2026-58644 and CVE-2026-50522, both scoring CVSS 9.8. CVE-2026-58644 had...