Microsoft Windows Secure Boot · Exploitation reportedVulnerabilities and patches
Vulnerabilities with fixes or active exploitation, from what needs action today to what you can plan.
- 151incidents in 30 days
- 33critical
- 31exploited
- 19updated in 24h
- Microsoft Windows Secure Boot · Exploitation reported
Progress WS_FTP Server · DisclosedProgress patches 15 WS_FTP flaws; worst steals admin credentials
Microsoft .NET · DisclosedMicrosoft Emergency Patch Fixes Critical .NET Buffer Overflow Flaw
HPE Aruba Networking ArubaOS · DisclosedHPE patches 8 CVSS 10 pre-auth RCE flaws in ArubaOS
Langflow · DisclosedLangflow Patches Two Critical Unauthenticated Remote Code Execution Flaws
HPE · DisclosedHPE Patches Eight Critical Flaws in Aruba AOS-8 and AOS-10
Fortinet FortiMail · DisclosedCSA reports active exploitation of patched critical FortiMail flaw
Adobe Commerce · DisclosedAdobe patches critical BlockStrap RCE in Magento; manual patch required
Next.js · DisclosedNext.js patches two critical unauthenticated RCEs; upgrade now
Linux kernel Kernel Linux: ksmbd · Public exploit codePublic root exploit reported in Linux kernel; no mainline fix yet
Clientes Telegram para iOS · Public exploit codeZDI publishes Telegram zero-day CVE-2026-111105 without client-side fix
Apple macOS · Public exploit codePoC released for macOS flaw granting root; Apple has fixed