CVEs that matter, exploitation status and patch guidance without the hype.
A security researcher discovered that customers with Workers Paid accounts could potentially recover residual disk data from other tenants on shared hosts. Cloudflare has fully remediated the vulnerability with no evidence of malicious exploitation.
Version 0.61.0 of Google's Gemini CLI now requires explicit approval before modifying build configuration files or executing commands that incorporate untrusted external content, addressing prompt injection risks in autonomous coding agents.
Canadian authorities confirm that CVE-2026-48842, a critical pre-authentication vulnerability in Roundcube Webmail, is being weaponized in the wild despite a May security update.
CISA has flagged a critical JetBrains TeamCity flaw as actively exploited by ransomware gangs, weeks after the vendor released patches and federal agencies received initial warnings.
The third-party.com domain, widely used as a stand-in for external services in developer documentation, is now hosting a fake Cloudflare verification page that tricks Windows users into running malicious PowerShell commands.
Two pre-authentication vulnerabilities in Check Point's Security Gateway are under active attack, with one exploited as a zero-day since July and the other since mid-September.
Attackers have escalated from reconnaissance probes to active exploitation of CVE-2026-87902, a critical path traversal vulnerability in WordPress that enables remote code execution. Malicious activity spiked tenfold as threat actors began writing executable files to compromised servers.
Enterprise infrastructure management systems are facing a surge in targeted attacks, with multiple critical vulnerabilities being exploited on or before public disclosure, according to Eclypsium's latest threat tracking data.
