Cyber alerts

Published Tuesday 7 July 2026 (03:32) (updated 7 July 2026)

BeyondTrust Releases Security Advisory for Remote Support & Privileged Remote Access

Advisory addresses 2 critical impact and 2 high impact vulnerabilities

Published Friday 3 July 2026 (10:21) (updated 3 July 2026)

Active Exploitation of CVE-2026-48282 in Adobe ColdFusion

Successful exploitation could lead to arbitrary code execution in the context of the current user

Published Thursday 2 July 2026 (03:18) (updated 2 July 2026)

Critical Vulnerabilities in UltraVNC Repeater Component

The critical vulnerabilities could allow a remote attacker either to obtain administrative control of the service through a hard-coded credential (CVE-2026-7839) or achieve unauthenticated arbitrary code execution (CVE-2026-7840)

Published Thursday 2 July 2026 (01:50) (updated 2 July 2026)

Active Exploitation of CVE-2026-45659 in Microsoft SharePoint

Successful exploitation of CVE-2026-45659 could allow an authorised attacker to achieve remote code execution on SharePoint servers via authenticated network access

Published Wednesday 1 July 2026 (02:19) (updated 3 July 2026)

Active Exploitation of CVE-2026-8451 in Citrix NetScaler ADC and NetScaler Gateway

Successful exploitation of CVE-2026-8451 could allow unauthenticated memory disclosure in NetScaler appliances when configured as a SAML IDP

Published Tuesday 30 June 2026 (02:46) (updated 30 June 2026)

SimpleHelp Releases Advisory for Authentication Bypass Vulnerability in SimpleHelp RMM

Successful exploitation of CVE-2026-48558 could allow a remote, unauthenticated attacker to bypass authentication and gain full administrative “Technician” access to managed endpoints

Published Thursday 25 June 2026 (03:59) (updated 25 June 2026)

FFmpeg Releases Update for Vulnerability in MagicYUV Decoder

Successful exploitation of CVE‑2026‑8461 could allow a DoS condition or RCE via crafted media files processed by applications that embed FFmpeg codecs

Published Thursday 25 June 2026 (02:28) (updated 26 June 2026)

Exploitation of Critical Vulnerability in Lantronix Serial-to-Ethernet Device Servers

Successful exploitation of CVE-2025-67038 could lead to unauthenticated OS command injection

Published Wednesday 24 June 2026 (04:37) (updated 24 June 2026)

Critical Vulnerabilities in Ubiquiti UniFi OS Devices

Ubiquiti has released Security Advisory Bulletin addressing multiple critical vulnerabilities that could allow an attacker with network access to execute commands, modify system configurations, or access sensitive files

Published Tuesday 23 June 2026 (02:17) (updated 23 June 2026)

Critical Remote Code Execution Vulnerability in libssh2

Successful exploitation could allow unauthenticated attackers to achieve remote code execution via crafted SSH packets