Cyber alerts

70 results

June 2026

Published Tuesday 30 June 2026 (02:46) (updated 30 June 2026)

SimpleHelp Releases Advisory for Authentication Bypass Vulnerability in SimpleHelp RMM

Successful exploitation of CVE-2026-48558 could allow a remote, unauthenticated attacker to bypass authentication and gain full administrative “Technician” access to managed endpoints

CC-4803 High

Published Monday 29 June 2026 (04:26) (updated 29 June 2026)

Exploited Critical Vulnerability in the Oracle Payments Component of Oracle E-Business Suite

CVE-2026-46817 could allow unauthenticated remote takeover of Oracle Payments

CC-4802 Medium

Published Thursday 25 June 2026 (03:59) (updated 25 June 2026)

FFmpeg Releases Update for Vulnerability in MagicYUV Decoder

Successful exploitation of CVE‑2026‑8461 could allow a DoS condition or RCE via crafted media files processed by applications that embed FFmpeg codecs

CC-4801 Medium

Published Thursday 25 June 2026 (02:28) (updated 26 June 2026)

Exploitation of Critical Vulnerability in Lantronix Serial-to-Ethernet Device Servers

Successful exploitation of CVE-2025-67038 could lead to unauthenticated OS command injection

CC-4800 Medium

Published Wednesday 24 June 2026 (04:37) (updated 24 June 2026)

Critical Vulnerabilities in Ubiquiti UniFi OS Devices

Ubiquiti has released Security Advisory Bulletin addressing multiple critical vulnerabilities that could allow an attacker with network access to execute commands, modify system configurations, or access sensitive files

CC-4799 Medium

Published Tuesday 23 June 2026 (02:17) (updated 23 June 2026)

Critical Remote Code Execution Vulnerability in libssh2

Successful exploitation could allow unauthenticated attackers to achieve remote code execution via crafted SSH packets

CC-4798 Medium

Published Wednesday 17 June 2026 (04:24) (updated 19 June 2026)

Splunk Releases Security Advisory For Critical Vulnerability in Splunk Enterprise

Successful exploitation of CVE-2026-20253 could allow a remote unauthenticated attacker to create arbitrary files, potentially enabling remote code execution and full system compromise

CC-4797 Medium

Published Wednesday 10 June 2026 (03:29) (updated 17 June 2026)

Cisco Releases Security Updates for Catalyst SD‑WAN Products

CVE-2026-20245 could allow an authenticated, local attacker to execute arbitrary commands as root, and CVE-2026-20262 could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.

CC-4796 Medium

Published Wednesday 10 June 2026 (11:49) (updated 10 June 2026)

Microsoft Releases June 2026 Security Updates

Scheduled updates for Microsoft products address 206 vulnerabilities

CC-4795 Medium

Published Wednesday 10 June 2026 (10:05) (updated 11 June 2026)

Ivanti Releases Security Advisory for Critical Vulnerabilities in Sentry

If exploited, two critical vulnerabilities could allow for unauthenticated OS command injection or authentication bypass