PHP · Exploitation confirmedAll articles
Everything the Radar published in the last 30 days, newest first. Search by company, product or CVE.
143 articles found · clear
- PHP · Exploitation confirmed
Múltiplos produtos Fortinet · Exploitation confirmedCISA confirms active exploitation of CVE-2025-61624 in Fortinet products
Plex Media Server · Exploitation confirmedCISA confirms active exploitation of Plex2Shell flaws in Plex Media Server
Atlassian · Exploitation confirmedCISA confirms active exploitation of CVE-2026-21589 in Atlassian Data Center
nginx · Disclosednginx fixes five vulnerabilities in versions 1.31.7 and 1.30.6
Palo Alto Networks PAN-OS · Exploitation confirmedCISA confirms active exploitation of authenticated RCE in PAN-OS
Cisco Secure Email Gateway · Exploitation confirmedCISA confirms active exploitation of Cisco Secure Email Gateway flaw
AhsayCBS · Exploitation confirmedCISA confirms active exploitation of AhsayCBS flaws; hotfixes available
Next.js · DisclosedNext.js patches two critical unauthenticated RCEs; upgrade now
Microsoft Windows Shell e componentes do Patch… · DisclosedOctober Patch Tuesday fixes actively exploited Windows Shell zero-day
Adobe Commerce · DisclosedAdobe patches critical BlockStrap RCE in Magento; manual patch required
Linux Kernel Linux · Public exploit codeLinux kernel networking flaw enables VM escape; fix available
Bricksforge · Exploitation reportedUnauthenticated RCE in Bricksforge WordPress Plugin Actively Exploited
SonicWall SMA1000 · Exploitation reportedCritical CVSS 10 SonicWall SMA1000 Flaw Exploited; Patch Available
Zammad GmbH Zammad · Exploitation confirmedCISA confirms active exploitation of two Zammad flaws
Ivanti Connect Secure · Exploitation confirmedExploited Ivanti zero-day gets PoC for sale on dark web
Fortinet FortiMail · DisclosedCSA reports active exploitation of patched critical FortiMail flaw
Citrix · Exploitation confirmedCISA confirms active exploitation of ten Citrix NetScaler zero-days
Telegram Desktop · DisclosedTelegram Desktop patches one-click account takeover in 7.2.9
Collabora / Nextcloud Collabora Online… · Exploitation confirmedCISA confirms active exploitation of critical Collabora CODE flaw in Nextcloud
BeyondTrust Remote Support · Exploitation confirmedBeyondTrust zero-day exploited since August; CISA urges patching
Palo Alto Networks PAN-OS · Exploitation confirmedPAN-OS CVE-2026-0257 actively exploited by ransomware operators and broker k0t
Fearless Wallet / Polkadot Community… · DisclosedFearless Wallet extension leaked private keys; Polkadot tells users to move funds