Cyber alerts

Published Thursday 2 July 2026 (03:18) (updated 2 July 2026)

Critical Vulnerabilities in UltraVNC Repeater Component

The critical vulnerabilities could allow a remote attacker either to obtain administrative control of the service through a hard-coded credential (CVE-2026-7839) or achieve unauthenticated arbitrary code execution (CVE-2026-7840)

Published Thursday 2 July 2026 (01:50) (updated 2 July 2026)

Active Exploitation of CVE-2026-45659 in Microsoft SharePoint

Successful exploitation of CVE-2026-45659 could allow an authorised attacker to achieve remote code execution on SharePoint servers via authenticated network access

Published Wednesday 1 July 2026 (02:19) (updated 3 July 2026)

Active Exploitation of CVE-2026-8451 in Citrix NetScaler ADC and NetScaler Gateway

Successful exploitation of CVE-2026-8451 could allow unauthenticated memory disclosure in NetScaler appliances when configured as a SAML IDP

Published Tuesday 30 June 2026 (02:46) (updated 30 June 2026)

SimpleHelp Releases Advisory for Authentication Bypass Vulnerability in SimpleHelp RMM

Successful exploitation of CVE-2026-48558 could allow a remote, unauthenticated attacker to bypass authentication and gain full administrative “Technician” access to managed endpoints

Published Thursday 25 June 2026 (03:59) (updated 25 June 2026)

FFmpeg Releases Update for Vulnerability in MagicYUV Decoder

Successful exploitation of CVE‑2026‑8461 could allow a DoS condition or RCE via crafted media files processed by applications that embed FFmpeg codecs

Published Thursday 25 June 2026 (02:28) (updated 26 June 2026)

Exploitation of Critical Vulnerability in Lantronix Serial-to-Ethernet Device Servers

Successful exploitation of CVE-2025-67038 could lead to unauthenticated OS command injection

Published Wednesday 24 June 2026 (04:37) (updated 24 June 2026)

Critical Vulnerabilities in Ubiquiti UniFi OS Devices

Ubiquiti has released Security Advisory Bulletin addressing multiple critical vulnerabilities that could allow an attacker with network access to execute commands, modify system configurations, or access sensitive files

Published Tuesday 23 June 2026 (02:17) (updated 23 June 2026)

Critical Remote Code Execution Vulnerability in libssh2

Successful exploitation could allow unauthenticated attackers to achieve remote code execution via crafted SSH packets

Published Wednesday 17 June 2026 (04:24) (updated 19 June 2026)

Splunk Releases Security Advisory For Critical Vulnerability in Splunk Enterprise

Successful exploitation of CVE-2026-20253 could allow a remote unauthenticated attacker to create arbitrary files, potentially enabling remote code execution and full system compromise

Published Wednesday 10 June 2026 (03:29) (updated 17 June 2026)

Cisco Releases Security Updates for Catalyst SD‑WAN Products

CVE-2026-20245 could allow an authenticated, local attacker to execute arbitrary commands as root, and CVE-2026-20262 could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.