Cyber alerts

73 results

July 2026

Published Thursday 2 July 2026 (03:18) (updated 2 July 2026)

Critical Vulnerabilities in UltraVNC Repeater Component

The critical vulnerabilities could allow a remote attacker either to obtain administrative control of the service through a hard-coded credential (CVE-2026-7839) or achieve unauthenticated arbitrary code execution (CVE-2026-7840)

CC-4806 Medium

Published Thursday 2 July 2026 (01:50) (updated 2 July 2026)

Active Exploitation of CVE-2026-45659 in Microsoft SharePoint

Successful exploitation of CVE-2026-45659 could allow an authorised attacker to achieve remote code execution on SharePoint servers via authenticated network access

CC-4805 Medium

Published Wednesday 1 July 2026 (02:19) (updated 1 July 2026)

Citrix Releases Security Advisory for NetScaler ADC and NetScaler Gateway

Successful exploitation of CVE-2026-8451 could allow unauthenticated memory disclosure in NetScaler appliances when configured as a SAML IDP

June 2026

CC-4804 Medium

Published Tuesday 30 June 2026 (02:46) (updated 30 June 2026)

SimpleHelp Releases Advisory for Authentication Bypass Vulnerability in SimpleHelp RMM

Successful exploitation of CVE-2026-48558 could allow a remote, unauthenticated attacker to bypass authentication and gain full administrative “Technician” access to managed endpoints

CC-4803 High

Published Monday 29 June 2026 (04:26) (updated 29 June 2026)

Exploited Critical Vulnerability in the Oracle Payments Component of Oracle E-Business Suite

CVE-2026-46817 could allow unauthenticated remote takeover of Oracle Payments

CC-4802 Medium

Published Thursday 25 June 2026 (03:59) (updated 25 June 2026)

FFmpeg Releases Update for Vulnerability in MagicYUV Decoder

Successful exploitation of CVE‑2026‑8461 could allow a DoS condition or RCE via crafted media files processed by applications that embed FFmpeg codecs

CC-4801 Medium

Published Thursday 25 June 2026 (02:28) (updated 26 June 2026)

Exploitation of Critical Vulnerability in Lantronix Serial-to-Ethernet Device Servers

Successful exploitation of CVE-2025-67038 could lead to unauthenticated OS command injection

CC-4800 Medium

Published Wednesday 24 June 2026 (04:37) (updated 24 June 2026)

Critical Vulnerabilities in Ubiquiti UniFi OS Devices

Ubiquiti has released Security Advisory Bulletin addressing multiple critical vulnerabilities that could allow an attacker with network access to execute commands, modify system configurations, or access sensitive files

CC-4799 Medium

Published Tuesday 23 June 2026 (02:17) (updated 23 June 2026)

Critical Remote Code Execution Vulnerability in libssh2

Successful exploitation could allow unauthenticated attackers to achieve remote code execution via crafted SSH packets

CC-4798 Medium

Published Wednesday 17 June 2026 (04:24) (updated 19 June 2026)

Splunk Releases Security Advisory For Critical Vulnerability in Splunk Enterprise

Successful exploitation of CVE-2026-20253 could allow a remote unauthenticated attacker to create arbitrary files, potentially enabling remote code execution and full system compromise